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Dear Sir: 

DECLARATION UNDER 37 CFR §1.132 

I, Steven Buchsbaum, Ph.D., do hereby declare as follows: 

1 . I received an M.S. and Ph.D. in physics in 1990, and an M.P.LA. with a specialization 
in International Technology Management in 1997, from the University of California, San Diego. 
I was a founding member and Director of the Office of Chemical, Biological, Radiological, 
Nuclear and Explosive Defense for the Department of Homeland Security's Advanced Research 
Projects Agency (HSARPA), created in 2003. Prior to joining HSARPA, I was a Program 
Manager in the Special Projects Office of the Defense Advanced Research Projects Agency 
(DARPA) where I was responsible for the development of: biosensors and defense systems 
against biological weapons; technologies to counter use of underground facilities; and other 
classified work. 

2. TIGER (Triangulation Identification for the Genetic Evaluation of Risk) is an 
embodiment of a method of amplification of nucleic acid of a bioagent with a pair of primers that 
hybridize to nucleic acid of a wide range of bioagents at sequences which flank a variable 
sequence. Measurement of the molecular mass or base composition of the amplification product 
provides means to rapidly identify the bioagent without any prior knowledge or assumptions of 
the identity of the bioagent and without sequencing of the amplification product. I understand 
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that this methodology is disclosed and claimed in the patent application in connection with which 
this declaration is being submitted. TIGER represents a completely novel approach which is not 
obvious in view of previously existing technologies. To my knowledge, no one ever previously 
proposed or disclosed that combining broad range priming of nucleic acid of bioagents with 
molecular mass measurements would be successful in rapid and accurate identification of 
bacterial and viral bioagents. Thus, the invention of the TIGER method produces results that 
would be unexpected by simply combining existing technologies such as general broad range 
priming and mass spectrometry. 

3. I was the original DARPA Program Manager for DARPA contract MDA972-00-C-0053 
through which funds were granted via a subcontract to Ibis Therapeutics, a division of Isis 
Pharmaceuticals, for the provision of biosensors for broad-based identification of bio warfare 
agents and emerging infectious diseases in environmental and human clinical samples. As a 
DARPA program manager, it was my responsibility to invest in "high risk, high reward" 
concepts with a tolerance for failure. In the particular case of the Isis work, at the start of the 
project I felt that there was very high risk that their novel concept of broad-range identification 
of bioagents by molecular mass analysis, then in its infancy stage, would meet with success. In 
fact, an early internal review (funded by the DARPA director) carried out by JASON, an elite 
independent senior scientific advisory group that provides consulting services to the U.S. 
government on matters of defense science and technology, concluded that it was unlikely that 
development of the proposed methods would be successful. The unexpected success of the 
methods developed under the project was such that I nominated Ibis Therapeutics for an award 
for best performance under a DARPA contract. 

4. I have been pleased to observe that over the last five years, Ibis Therapeutics has been 
awarded substantial additional funding from other U.S. government agencies including the 
Department of Defense, The Center for Disease Control, the National Institutes of Health, and 
the Homeland Security Advanced Research Projects Agency (HSARPA). Some of this funding 
was applied for at my suggestion and with my assistance while I was a DARPA Program 
Manager. While this grant funding has focused upon the long felt but unmet needs in biodefense, 
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infectious disease surveillance, and forensics, TIGER also has great applicability for broad 
application in other areas of healthcare, including pharmaceutical process control, healthcare- 
associated infection control, and in vitro diagnostics. 

5. I have also been pleased to observe that several independent commentaries and high 
visibility publications in prestigious journals have provided an indication that the TIGER 
methods are innovative, produce results that would be unexpected in light of prior technologies, 
satisfy a long-felt and unmet need, and have great potential for commercial success. The 
appended exhibits (A-E) illustrate these points. 

6. Exhibit A describes an embodiment of the TIGER method wherein a particularly 
virulent strain of Streptococcic pyogenes was identified as the cause of an outbreak of 
respiratory disease in a military barracks. This article appeared in the May 21, 2005 issue of 
Proceedings of the National Academy of Sciences. The article, independently edited and peer 
reviewed, indicates the innovative nature of the method and that the method satisfies a long felt 
need for rapid identification of infectious bioagents for epidemic tracking such as specific 
subtypes of Streptococcus pyogenes and other co-infecting respiratory pathogens. One 
particularly surprising and unexpected result of great utility that was obtained from the invention 
is that it may also be used for an analysis of microbial populations. For example, as described on 
page 8015, column 2 of the article, it is stated that .military recruits in the midst of a 
respiratory disease outbreak had a dramatically different microbial population than that 
experienced by the general population in the absence of epidemic disease." 

7. Exhibit B is a third-party article that appeared in the August 1 , 2004 issue of Analytical 
Chemistry which describes the innovations of the TIGER method. 

8. Exhibit C is a third-party "innovations article" which appeared in Scientific American 
in November 2002. 
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9. 



Exhibit D is a third-party review article published in Nature Reviews - Drug Discovery 



in April 2005 which highlights the applicability of the TIGER method in the field of biodefense 
(see page 292, col. 2). 

10. Exhibit E is a third-party article published in the August 27, 2004 issue of Science 
which indicates the applicability of the TIGER method as a biosensor for air surveillance of 
pathogens (see page 1229, col 1). 

11. I declare that all statements made herein are of my own knowledge true and statements 
made on information and belief are believed to be true; and further that these statements were 
made with the knowledge that willful false statements and the like so made are punishable by 
fine or imprisonment, or both, under section 1001 of Title 18 of the United States Code and that 
such willful false statements may jeopardize the validity of the application or any patent issued 
thereon. 
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Epidemic respiratory infections are responsible for extensive mor- 
bidity and mortality within both military and civilian populations. 
We describe a high-throughput method to simultaneously identify 
and genotype species of bacteria from complex mixtures in respi- 
ratory samples. The process uses electrospray ionization mass 
spectrometry and base composition analysis of PCR amplification 
products from highly conserved genomic regions to identify and 
determine the relative quantity of pathogenic bacteria present in 
the sample. High-resolution genotyping of specific species is 
achieved by using additional primers targeted to highly variable 
regions of specific bacterial genomes. This method was used to 
examine samples taken from military recruits during respiratory 
disease outbreaks and for follow up surveillance at several military 
training facilities. Analysis of respiratory samples revealed high 
concentrations of pathogenic respiratory species, including Hae- 
mophilus influenzae, Neisseria meningitidis, and Streptococcus 
pyogenes. When 5. pyogenes was identified in samples from the 
epidemic site, the identical genotype was found in almost all 
recruits. This analysis method will provide information fundamen- 
tal to understanding the polymicrobial nature of explosive epi- 
demics of respiratory disease. 

genotyping | group A streptococci | infectious disease | 
Streptococcus pyogenes | pneumonia 

Despite the prevalence of epidemic respiratory infections and 
their important impact on global human health, the molecular 
underpinnings of these conditions remain poorly understood. Ep- 
idemic respiratory infections can be caused by a wide variety of 
bacteria, including several species of Streptococcus, Haemophilus 
influenzae, Staphylococcus aureus, Neisseria meningitidis, Myco- 
plasma pneumoniae, and Chlamydophila pneumoniae, or viruses 
such as influenza virus, adenovirus, rhinovirus, or coronaviruses (1, 
2). Although various culture methods, molecular techniques, and 
serologic diagnostic tests exist, for many epidemics the causative 
microorganism(s) axe never determined. Furthermore, there has 
been no practical ffiethod for examining the broad bacterial ecology 
of respiratory infections to dissect the complex polymicrobial 
interactions that occur during explosive outbreaks of disease. 

Group A streptococci (GAS), or Streptococcus pyogenes, is one of 
the most important organisms associated with respiratory infections 
because of its prevalence and its ability to cause severe disease with 
complications such as acute rheumatic fever and acute glomerulo- 
nephritis (3). The ability to simultaneously identify GAS and other 
bacteria and viruses in large numbers of samples would greatly 
facilitate our understanding of respiratory epidemics. It is also 
essential to follow the spread of specific virulent strains of GAS in 
populations and to distinguish virulent strains from avirulent 
streptococci (3). 

Molecular methods have been developed to genotype GAS based 
on the sequence of the emm gene that encodes the M-protein 
virulence factor (4-6). More than 150 different emm types have 
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been defined and correlated with phenotypic properties of thou- 
sands of GAS isolates by using this molecular classification (www. 
cdc.gov/ncidod/biotech/strep/strepindex.html) (7). Recently, a 
strategy known as multilocus sequence typing (MLST) was devel- 
oped to determine the molecular epidemiology of GAS and other 
bacterial pathogens. The results from MLST are highly concordant 
with several other typing methods (8). 

Although MLST provides detailed analysis of isolated GAS 
strains, it provides no information about the other respiratory 
microbes that may participate in the pathology. We now report a 
technique that rapidly identifies multiple respiratory microorgan- 
isms simultaneously in a quantitative fashion. This allows for broad 
microbial population analysis and strain tracking of an ongoing, 
geographically dispersed epidemic on a large scale. We specifically 
identified the bacterial pathogens present during a respiratory 
disease outbreak at a military training camp (9), characterized the 
GAS strain-genotype, and analyzed the spread to other military 
facilities. 

Materials and Methods 

Selected isolates used in this research from the Naval Health 
Research Center were collected in compliance with all applicable 
federal regulations governing the protection of human subjects in 
research under approved protocol NHRC.2001.0008. 

Primer Selection. Broad-range PCR primers for mass spectrometry 
analysis were designed to target conserved regions of bacterial 
ribosomal DNA genes (16S and 23S) and genes encoding house- 
keeping proteins common to all bacteria (Table 1). Primers for 
genotyping GAS using mass spectrometric analysis were designed 
to target sequences from each of the seven housekeeping genes 
used in MLST. The nucleotide sequences for these genes from 212 
isolates of GAS (78 distinct emm types) were obtained from 
www.mlst.net. These correspond to the 100 different allelic profiles 
referred to by Enright et al. as ST1-ST100 (8). Twenty-four primer 
pairs were designed and validated against 5. pyogenes. A final subset 
of six primer pairs (sequences are shown in Table 4, which is 
published as supporting information on the PNAS web site) was 
chosen based on a theoretical calculation of minimal number of 
primer pairs that maximized resolution between emm types. 

Mass Spectrometry and MLST. After amplification, 15 uJ-aliquots of 
each PCR were desalted and purified by using a weak anion 
exchange protocol as described (10). Accurate-mass (±1 ppm), 
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Table 1. Broad-range and 5. pyogenes-specific genotyping 
primer targets and scope of coverage 
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Sequences of the primers are provided in Table 4. Primer coverage of 
bacterial phylogeny is depicted pictorially in Fig. 4. The locations of the 
primers targeting ribosomal sequences are depicted mapped to the rRNA 
structures in Fig. 2 (165) and 3 (23S). 



high-resolution (Af/AAf > 100,000 full-width half maximal) mass 
spectra were acquired for each sample by using high-throughput 
electrospray ionization mass spectrometry (ESI-MS) protocols as 
described (11, 12). For each sample, 1.5 fx\ of anaryte solution was 
consumed during the 60-s spectral acquisition. Raw mass spectra 
were converted to monoisotopic molecular masses. Unambiguous 
base compositions were derived from the exact mass measurements 
(13). Quantitative results are obtained by comparing the peak 
heights with an internal PCR calibration standard present in every 
PCR well at 500 molecules for the ribosomal DNA-targeted 
primers and 100 molecules for the protein-encoding gene targets 
(11). GAS isolates were analyzed by using emm gene-specific PCR 
as described (4, 14). MLST analysis was performed as described (8). 

Results and Discussion 

Broad Surveillance, Identification, and Rapid Strain-Genotyping of 
Bacterial Pathogens. To begin to decipher the polymicrobial dy- 
namics that underlie epidemic outbreaks of respiratory disease, it 
would be valuable to analyze respiratory samples for a broad range 
of bacterial pathogens simultaneously and to obtain high-resolution 
strain-genotyping information on specific species. We have devel- 
oped a rapid, high-throughput molecular method to achieve these 
objectives and have tested it on samples obtained from respiratory 
disease outbreaks associated with S. pyogenes in military training 
facilities (9). The experimental methodology is based on analysis of 
multiple PCR amplicons using PCR/ESI-MS to determine base 
compositions of complex mixtures of amplicons (11, 13). High- 
resolution genotyping of specific bacterial species, in this case S. 



pyogenes , was accomplished by analyzing the samples with species- 
specific primers that interrogate regions of high intraspecies vari- 
ability to distinguish closely related strains. 

To measure the broad landscape of bacteria present in respira- 
tory samples, a set of 16 broad-range surveillance primers was used 
that allow PCR amplification and quantitative identification of 
many different bacterial pathogens and respiratory commensal 
flora. Gene targets of these primers are listed in Table 1, and 
sequences are shown in Table 4. The surveillance primers were 
chosen by computational analysis of sequence alignments of the 
ribosomal DNA operons and 160 broadly conserved protein- 
encoding housekeeping genes. The ribosomal DNA-targeted prim- 
ers have the broadest range of bacterial coverage. For example, the 
four primer pairs targeted to 16S ribosomal DNA match, on 
average, 98% of the bacterial sequences in the Ribosomal Database 
Project (http://rdp.cme.msu.edu) allowing for two to three mis- 
pairings under permissive PCR cycling conditions. The sites of 
hybridization and the sequence conservation in these regions are 
shown on the ribosomal RNA structures in Figs. 2 and 3, which are 
published as supporting information on the PNAS web site. The 
primers targeted to protein-encoding housekeeping genes have 
breadth of coverage at the level of major bacterial subdivisions (e.g., 
beta proteobacteria, bacilli); their specificity is described in Table 
1 and graphically depicted in Fig. 4, which is published as supporting 
information on the PNAS web site. 

Analysis of the amplified regions from major respiratory patho- 
gens showed that the base compositions of these regions unambig- 
uously distinguished all recognized respiratory pathogens from 
each other and from normal flora, including closely related species 
of Streptococci and Staphylococci (base compositions are listed in 
Table 5, which is published as supporting information on the PNAS 
web site). Although any single primer target region might have an 
overlap of base compositions with another species, combined 
information from multiple primer pairs provided unambiguous 
organism-specific signatures for all major respiratory pathogens. 
For example, S. pyogenes and Streptococcus pneumoniae have target 
regions that are amplified by 9 and 10 of the surveillance primers, 
respectively. The base compositions of these two species are iden- 
tical in only one target region, and differ in all remaining target 
regions by up to four base substitutions per region. We confirmed 
the resolving power of the target regions by determining the base 
compositions of 120 isolates of respiratory pathogens representing 
70 different bacterial species (data not shown). The results showed 
that the observed variations (usually one or two base substitutions 
in the amplified region) in base composition amongst multiple 
isolates of the same species did not prevent correct identification of 
major pathogenic species. 

For high-resolution strain genotyping, we designed a strategy to 
generate strain-specific signatures that follows the rationale of 
MLST. We constructed an alignment of concatenated alleles of the 
seven MLST housekeeping genes from each of 212 previously 
emm-typed strains (8) and determined the number and location of 
the primer pairs that would maximize strain discrimination. An 
initial set of 24 primer pairs was selected that would amplify regions 
covering >97% of the nucleotide variation in the MLST sequencing 
targets. We then determined how much strain discrimination could 
be achieved from a smaller set of primers. Performance calculations 
for different possible combinations of primer subsets showed that 
six pairs of primers allowed discrimination at the individual emm- 
type level of >75% of all of the emm types listed by Enright et al 
(8), whereas the remaining 25% clustered into groups of two or 
more emm types (see Fig. 5, which is published as supporting 
information on the PNAS web site, for details). This degree of 
resolution was considered sufficient for applications such as track- 
ing the clonal expansion of a particular strain type during a specific 
epidemic. However, if complete emm typing is required, 12 primer 
pairs can be used to completely resolve all emm types. 
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Table 2. Base composition analysis of GAS samples 




Base compositions from each primer target site are color-coded so that each unique base composition has its own color. ND, no data. 
♦Samples were determined to be GAS-negative by independent culture techniques. 



Identification and Strain Genotyping of GAS Isolates. Four sets of 
throat samples taken from recruits at different military facilities 
were examined. The first set was collected at a military training 
center in 2002 during one of the most severe outbreaks of pneu- 
monia associated with GAS in the U.S. since 1968 (9). Throat swabs 
were taken from both healthy and hospitalized recruits and plated 
for selection of putative GAS colonies. A second set of 15 original 
patient specimens was taken during the height of this disease 
outbreak. The third set were historical samples from disease 
outbreaks at this and other military training facilities during pre- 
vious years. The fourth set of samples was collected from five 
geographically separated military facilities in the continental U.S. 
in the winter immediately after the severe 2002 outbreak. 

Colonies isolated from GAS selective media from all four 
collection periods were analyzed with the broad surveillance prim- 
ers and GAS genotyping primers (Table 1). When the surveillance 
primers were used, all samples showed base compositions that 
precisely matched the four completely sequenced strains of 5. 
pyogenes (15-20). The results of the base composition analysis with 
genotyping primer pairs for samples from all four collection periods 
are compared to results from 5' -emm gene sequencing and the 
MLST gene sequencing methods in Table 2. When only these six 
primer pairs were used, some of the samples could not be resolved 
to a unique emm type. However, base composition analysis showed 
identification consistent with (either uniquely or as a member of a 



small set) S'-emm gene sequencing or the MLST sequencing 
method. 

Genotyping GAS Isolated from the 2002 Epidemic and Testing of 
Original Patient Specimens. Of the 51 samples taken during the peak 
of the November/December 2002 epidemic (Table 2, rows 1-3), all 
but three had identical base compositions and corresponded to 
emm3 y a GAS genotype previously associated with high respiratory 
virulence (17, 19). The three outliers (Table 2, rows 2 and 3) were 
samples from healthy individuals and probably represent nonepi- 
demic strains harbored by asymptomatic carriers. Archived samples 
(Table 2, rows 5-13) from historical collections showed a much 
greater heterogeneity of composition signatures and emm types, as 
would be expected for different epidemics occurring at different 
times and places. 

During the peak of the 2002 outbreak, duplicate throat swabs; .. . 
were taken from military recruits who were not overtly symptom- 
atic but who were living and training in the same community. One 
of the paired swabs was used to isolate GAS colonies oh selective 
media and the other swab was analyzed directly. Fifteen of the 
paired swabs that showed at least one colony on GAS-selective 
media were selected for further study. When the surveillance . 
primers were used, all 15 of these GAS isolates showed base 
compositions identical to the sequenced GAS genomes, as was 
observed with all previous GAS isolates in this study. The six 
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GAS-specific genotyping primers indicated that all 15 samples had 
the same GAS genotype (Table 2, row 4), corresponding to emmS, 
the identical signature obtained from the symptomatic individuals 
in this outbreak, consistent with the clonal expansion of a single 
genotype. 

The duplicate swabs were analyzed without culture by using the 
16 broad surveillance and six GAS-specific genotyping primers. 
Analysis using the surveillance primers revealed that these samples 
had a mixture of microbes, as might be expected from a complex 
sample (Table 3). Of the 15 samples, six showed evidence of GAS 
using the broad surveillance primers, and seven showed positive 
detection using all six genotyping primers (Tables 3 and 2, row 39). 
Of the remaining eight samples, five were positive with two to four 
genotyping primers (Table i^rows 40-43) and three of the samples 
were negative with all six genotyping primers (Table 2, row 44). 
These results suggest that GAS was present in these samples at 
widely varied concentrations. 

In addition to GAS, other potentially pathogenic organisms were 
identified. In an exemplary sample (Table 3, sample 5), GAS was 
identified along with strong signals consistent with N. meningitidis 
and H. influenzae (Fig. 1). The 16 surveillance primers have a 
varying degree of breadth in their coverage. The six primers that 
target 16S and 23S ribosomal DNA were designed to amplify all 
bacteria from the major divisions (Table 1). Mass spectral analysis 
of the products from primers that target 16S and 23S ribosomal 
DNA (Fig. 1 Upper Right and Lower Left) showed that the dominant 
signals were from K influenzae, N. meningitidis, and S. pyogenes 
(GAS) present in a ratio of ^20:5:4 as determined by comparison 
of peak heights with that of internal PCR calibration standards for 
several of the primers. In contrast to the primers that amplify 
ribosomal DNA genes, the primers that target genes encoding 
housekeeping proteins were designed to provide coverage of spe- 
cific divisions of bacteria. For example, primer pair 356 targets the 
rplB gene (Table 1) and primarily amplifies the bacterial classes 
Bacilli (which includes S. pyogenes) and Clostridia, but does not 
amplify Proteobacteria such as K meningitidis and H. influenzae. 
Analysis of the spectrum from this primer set shows S. pyogenes as 
the only major product (Fig. 1 Lower Right). As expected, primers 
targeted to the proteobacterial species identified TV. meningitidis 
(corroborating evidence for the simultaneous circulation of N. 
meningitidis during this epidemic was obtained from culture data 
from a hospitalized patient who subsequently died from pneumonia 
during this period; K. Russell, unpublished data) and if. influenzae, 
but not S. pyogenes (data not shown). Although base compositions 
detected from some of the surveillance primers are consistent with 
more than one organism, the collective data from the 16 surveil- 
lance primers unambiguously identified these three bacterial spe- 
cies as responsible for the bulk of the bacterial load in this throat 
swab. Thus, using this surveillance panel of primers, it is possible to 
identify the major bacterial components of a complex sample and 
to determine their approximate concentrations. 

To corroborate the results of mass spectrometry analysis of PCR 
products obtained by using the surveillance primer set, we analyzed 
two of the samples by broad-range priming followed by cloning and 
sequencing (21). The results from sequencing ~700 nucleotides of 
16S ribosomal DNA were in good agreement with the mass 
spectrometry analysis with respect to both identification of species 
and the relative abundance for the organisms that constituted > 5% 
of the total microbial load in the sample (details in Table 6, which 
is published as supporting information on the PNAS web site). 
However, cloning and sequencing indicated the presence of addi- 
tional species of bacteria not identified by PCR/ESI-MS. For 
example, based on sequencing, 5% of the bacterial load in sample 
5 (Table 3) was comprised of Corynebacteriumfastidiosum. Retro- 
spective analysis of the mass spectra revealed peaks that were 
consistent with the presence of this organism, but the peak heights 
across the surveillance primer set were insufficient to make a 
positive identification. Thus, broad-range primer analysis will be 



Table 3. Analysis of 15 throat swabs 
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less sensitive on an absolute scale for a low abundance organism 
than species-specific primers that do not have to compete for PCR 
resources with multiple microbes (see sensitivity measurements 
below). The other sample that was analyzed by both PCR/ESI-MS 
and sequencing (Table 3, sample 14) contained S. pyogenes and 
Staphylococcus aureus in a ratio of ~5:1 as determined by PCR/ 
ESI-MS and about 3,5:1 by sequencing. 

It is interesting that the 15 throat swabs from military recruits 
contained a relatively small set of microbes in high abundance 
(Table 3). The most common were H. influenzae, N. meningitidis, 
and S. pyogenes; S. epidermidis, M. catarrhalis, C. pseudodiphtheriti- 
cum, and S. aureus were present in fewer samples. We also analyzed 
an equal number of samples from healthy volunteers in the same 
fashion and did not observe the same pattern of microbes (samples 
were taken from 23 healthy volunteers from each of three different 
geographic locations, not from military training settings). Healthy 
volunteers showed a flora dominated by multiple, commensal 
non^-hemolytic Streptococcal species, including viridans group 
streptococci (Streptococcus parasanguinis, Streptococcus vestibularis, 
Streptococcus mitis, Streptococcus oralis, and S. pneumoniae; data 
not shown). Thus, the military recruits in the midst of a respiratory 
disease outbreak had a dramatically different microbial population 
than that experienced by the general population in the absence of 
epidemic disease. 

Genotyping GAS Isolated from Geographically Separated Military 
Facilities in 2003. After the 2002 epidemic associated with a virulent 
emm3 strain, we surveyed respiratory disease outbreaks at other 
military facilities. It was possible that the virulent genotype from the 
epidemic might have spread to these locations later in the winter 
season. GAS isolated from patients with respiratory disease was 
examined by base composition analysis and by emm-gene sequenc- 
ing. The results (Table 2, rows 14-33) showed concordance be- 
tween base composition analysis and emm gene sequencing. One or 
two samples from each location had an emm3 genotype. However, 
the distribution of GAS types at these locations showed a pattern 
significantly different from the original epidemic, suggesting that 
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Fig. 1. Mass spectra from DNA amplified from a throat swab (Table 3, sample 5) using each of the 16 surveillance primers (Table 1). (Upper Left) Thumbnail 
spectra from 1 6 primers. Each of the PCRwells was calibrated by using an internal standard identical to the bacterial target sequence except for a 2- to 5-nt internal 
deletion (calibrant peaks are shown in yellow). (Upper Right) Spectrum from a primer pair that targets 23S rDNA. The paired peaks correspond to the sense and 
antisense strands of the PCR amplicon that are separated under conditions of ionization. The peaks are labeled with base composition of the amplicons and the 
organism that matches the composition. (Lower Left) Spectrum from a primer pair that targets 16S rDNA. (Lower Right) Spectrum from a primer pair that targets 
the Bacilli, but not the Proteobacteria. 



the epidemic strain was not dominating the population of GAS at 
other locations. 

Throat swabs from eight individuals showing respiratory symp- 
toms were obtained and analyzed after culture and directly from the 
swab. Five of the eight patients tested positive for GAS by culture 
on selective media (Table 2, rows 34-38). Samples that were 
. culture-positive were also GAS-positive by base composition anal- 
ysis when analyzed directly from the swab, whereas the three 
culture-negative samples were also negative by PCR/ESI-MS. 

Sensitivity, Dynamic Range, and Reproducibility. To evaluate the limit 
of detection, serial 2-fold dilutions of known amounts . of. genomic 
DNA isolated from S. pyogenes were added to water or genomic 
material isolated from throat swabs from healthy volunteers. In 
water, both the broad surveillance and genotyping primers reliably 
detected as few as 15 genome copieis of S. pyogenes per PCR well 
(data not shown). In the presence of normal throat flora, the 5. 
pyogenes genotyping primers, which do not competitively amplify 
commensal streptococcal species,, had tine same sensitivity as in 
water. However, the broad surveillance primers lost sensitivity for 
S. pyogenes in the presence of floral DNA because of PCR 



competition with commensal streptococcal organisms. The limit of 
detection was ^2,500 genomic copies per well in the presence of the 
average amount of normal flora taken from a throat swab (pooled 
from 15 volunteers and divided to one swab-equivalent). On the 
other hand, when K pneumoniae and B. anthracis were spiked into 
normal throat flora, the limit of detection was 10-30 genome 
copies per well for both organisms. The difference in sensitivity for 
S. pyogenes vs. K pneumoniae and B. anthracis can be attributed to 
the predominance of streptococcal organisms in normal flora. 
Although all of the surveillance primers that amplify S. pyogenes 
also competitively amplify commensal streptococcal species, sev- 
eral of the surveillance primers (in particular those that target genes 
encoding housekeeping proteins) amplify K pneumoniae and B. 
anthracis and exclude the commensal streptococci. Thus, the lower 
limit of detection for a particular organism is not absolute, but varies 
with the level and nature of competing DNA and the coverage of 
the surveillance primers (see dynamic range experiment below). 
This is uniquely problematic for & pyogenes in a throat flora 
background, which is dominated by commensal streptococcal spe- 
cies. To detect low levels of 5. pyogenes in the presence of throat 
flora, one or more of the 5. pyogenes-speci&c genotyping primers 
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that do not amplify commensal streptococcal species would be 
necessary. 

To determine the dynamic range and linearity of competitive 
PCR/ESI-MS, we mixed three organisms in varying relative ratios 
ranging from 10 to 10,000 and analyzed them by using the surveil- 
lance primer set. The results (Fig. 6, which is published as support- 
ing information on the PNAS web site) showed a dynamic range of 
at least 1,000:1, where one organism could be detected in the 
presence of a 1,000-fold excess of one or two other organisms. The 
deviation from linearity at 45 cycles of PCR over a 1,000:1 dynamic 
range was ±60%. The dynamic range would vary somewhat for 
different mixtures of organisms, depending on their coverage by the 
surveillance primers. Having a mix of primers with varying breadth 
in specificities effectively expands the overall dynamic range of the 
system while assuring that the major bacterial components of a 
mixture are identified. 

To assess swab-to-swab variation, we analyzed duplicate throat 
swabs from 23 healthy volunteers. The composition of the bacterial 
flora varied somewhat from individual to individual, but the 
replicate swabs from the same donor showed virtually identical 
profiles (Fig. 7, which is published as supporting information on the 
PNAS web site). The bacteria from these duplicate swabs were all 
dominated by commensal Streptococcus spp., as expected for nor- 
mal throat flora from healthy donors (21). 

Conclusions 

In both developing and developed nations, the leading cause of 
death by a wide margin is acute respiratory disease (22-24). 
However, the underlying microbial ecology and the polymicrobial 
interactions that mediate explosive epidemics remains poorly un- 
derstood. We have developed a strategy to simultaneously survey 
respiratory samples for the presence of many different pathogenic 
agents and to provide high-resolution strain genotyping for selected 
species of bacteria. Using a set of surveillance primers targeted to 
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broadly conserved regions of bacterial genomes, PCR amplicons 
were generated and analyzed by ESI-MS, and the identity and 
relative quantity of microorganisms was determined by using the 
base compositions of the amplicons. This method allows rapid 
detection of the abundant microbial flora present in a complex 
sample. To track a particular bacterial strain that may be the driving 
force of an epidemic, high-resolution genotyping capability is 
required. This is accomplished by the use of species-specific primers 
that target regions of high variation. 

In this study, we analyzed four sets of respiratory samples from 
military settings. Military recruits live in close quarters and are 
subject to intense physical and vocal stress as a normal part of 
training. Analysis of respiratory samples from military recruits 
living in a training community where a high amount of respiratory 
disease was present showed high concentrations of one or several 
pathogenic respiratory bacteria, including GAS, H. influenzae, and 
N. meningitidis. From the epidemic site, the identical GAS genotype 
was identified in almost all recruits. The respiratory flora present 
in these recruits was not found in healthy controls. 

We have developed a rapid, high-throughput, and cost-effective 
method for surveying large numbers of samples that provides both 
a broad view of the bacterial organisms present and a high- 
resolution genotype of selected species. The PCR/ESI-MS analysis 
of 96 samples with all surveillance primers takes «*19 h, and has 
sufficient speed and throughput to be useful in tracking of an 
ongoing epidemic. Although this work focused on identification of 
bacteria, with detailed strain genotyping of GAS, the PCR/ESI-MS 
method described here can be extended to broad groups of viruses 
(25), fungi, and pathogenic protozoa We envision using this 
methodology to enhance our understanding of the fundamental 
nature of explosive epidemics of respiratory disease. 
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EXHIBIT B 



Detecting newly emerging 
pathogens by MS 

Suppose that thousands of people in 
Washington, DC, are suddenly falling 
ill. Severe body aches and mysterious le- 
sions are the main symptoms. Hospitals 
are inundated with patients. Technicians 
are running lab tests as fast as they can, 
but results from culturing can take as 
many as seven days, and the tests are 
coming back negative for all known 
organisms. PCR-based tests, although 
faster, are also failing to detect the new 
pathogen. What can be done? 

Steven Hofstadler and colleagues 
at Ibis Therapeutics and Science Appli- 
cations International Corp. are working 
on a solution just in case such a sce- 
nario does take place. With funding 
from the U.S. Department of Defense's 
Defense Advanced Research Projects 
Agency, they have developed Triangula- 
tion Identification for Genetic Evalua- 
tion of Risk (TIGER) — a new strategy 
for identifying both known and previ- 
ously uncharacterized pathogens. 
TIGER can be used to identify a wide 
range of organisms, such as viruses, 
bacteria, fungi, and parasitic protozoa. 

The conventional methods of cultur- 
ing swabbed samples and using PCR 
primers to amplify species-specific re- 
gions of organisms' genomes produce 
true/false results, and many iterations 
must be run, says Hofstadler. "TIGER 
is one thorough test that answers the 
question, 'What is in my sample?' It's 
a big essay." 

According to Hofstadler, TIGER's 
power comes from the use of broad- 
range primers. U A broad-range primer 
is one that lands and hybridizes to high- 
ly conserved regions of die genome but 
that flanks variable regions that have 
large differences in base composition," 
he explains. For example, although a 
particular set of primers may bind to the 
genomes of all Streptococcus species, the 
actual PCR products will contain differ- 
ent amounts of As, Gs, Cs, and Ts, de- 
pending on the species. The primers are 
also designed so that they all work well 
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under identical conditions. Therefore, 
samples can be loaded onto 96- or 384- 
well plates for high-throughput PCR. 
Following PCR, the nucleic acid prod- 
ucts are analyzed by MS. 

Sequence information is not ob- 
tained by the method. Instead, each 
PCR product has a characteristic num- 
ber of nucleotide bases and a unique 
m/z value, and these data are used to 
determine the identity of die patiiogen. 
If an unexpected composition is dis- 
covered, the researchers map the new 
signature in 3-D or 4-D space along 
axes representing each nucleotide. Base 
composition signatures for other or- 
ganisms are also plotted. From this, a 
phylogenetic tree of relatedness can 
be constructed. 

TIGER can detect mixtures of organ- 
isms in the same sample. For example, 
Hofstadler says that by using TIGER, 
his group identified the SARS virus as a 
new member of the coronavirus family. 
When he and his co-workers mixed SARS 
with two other coronaviruses, they clearly 
observed six peaks on the mass spectrum, 
two for each species. 

In December 2002, the U.S. Naval 
Health Research Center (NHRC) con- 
tacted Hofstadler and his team to iden- 
tify the pathogen responsible for an out- 



break among 
Marine recruits. 
The researchers 
confirmed that 
Streptococcus 
pyogenes was the 
culprit. "But the 
next thing they 
wanted to know 
was the Emm- 
type, the 'flavor* 
of Strep" says 
Hofstadler. Se- 
§ quencing is typi- 
| cally used for this 
: ^ r | analysis, but his 

g group used TIGER 
| to obtain base 
8 composition tags 
instead. It took 
6 min to type 
each sample by TIGER. "We blew 
through these and rapidly had a bunch 
of Emm-types that we thought were 
correct, and this was in December," he 
says. "Then, in March, when [NHRC] 
finally got their sequencing results back 
and compiled, we sat down and agreed 
that we agreed." 

In addition to running the method 
through its paces, the researchers are 
also working on integrating all the 
components into a laboratory-based 
system, which will be called TIGER 
2.0. The Ibis group is already develop- 
ing the next version of TIGER, which 
is being designed as a bench -top system 
suitable in size for clinical diagnostics 
laboratories. 

Biowarfare, infectious disease epi- 
demics, food contamination, and hu- 
man forensics are just a few of the ap- 
plications that Hofstadler foresees for 
the new method. His group is collabo- 
rating with many scientists in several gov- 
ernment agencies, and interest is strong, 
he says. TIGER has a good track record, 
too. "We've analyzed over 20 million 
liters of air with TIGER," he says. "We've 
never false alarmed on a threat agent nor 
have we ever missed detecting an agent 
diat we've intentionally spiked into the 
air sample." 
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EXHIBIT C 



The Universal Biosensor 

A drug company tries to make a detector that can find nearly any biopathogen By GARY STIX 



Chance is often the best inventor. Isis Pharmaceuticals 
never set out to become a maker of sensors for bio- 
logical weapons. The company, based in Carlsbad, 
Calif., is best known for its work in developing anti- 




INSPIRATION for Ibis Therapeutics's broad-scan biodetector came when company 
president David J, Ecker realized that a method used to screen for potential RNA- 
binding drugs might provide a means of looking for pathogens. 



sense therapies, the use of small pieces of DNA-like 
molecules that bind to messenger RNA (a copy of a 
gene) to block synthesis of an encoded protein. Its re- 
search led to the formation of a division called Ibis 
Therapeutics, which develops chemicals other than 
DNA that would interfere with RNA. 

Along the way, Ibis discovered a method of screen- 
ing pathogens that might lead to a universal detector 
for biological weapons — even perhaps nefarious, as yet 
to be invented bioengineered strains of pathogens. The 
road to a universal biosensor began in the mid-1990s, 
when Ibis started looking for chemicals with a low mo- 
lecular weight that would bind to and block the activ- 
ity of RNA, the same mechanism used by many anti- 
biotics. The Defense Advanced Research Projects Agency 
(DARPA) funded some of the research because of its in- 
terest in finding new drugs to counter the microorgan- 
isms used in biowarfare. Conventional high-through- 
put screening— conducting a multitude of tests to mea- 
sure the interaction of drug candidates with different 
enzymes — is ineffective for drugs that would work by 
binding to RNA. So Ibis began to explore the possibil- 
ity of using mass spectrometry to determine when a 
small molecule binds to RNA. 

The company refined a technique called electrospray 
ionization, as well as mass spectrometry, to extract 
RNA and the bound drug candidate from an aqueous 
solution intact and then suspend those molecules in a 
vacuum, where they can be weighed. As the methods 
proved themselves, Ibis president David J. Ecker came 
to the realization that pulling out the RNA alone, with- 
out the bound molecule, would provide the makings of 
an extraordinary sensing system. 

After RNA from a cell is weighed with the spec- 
trometer—each cell has multiple types of the mole- 
cule—these very precise measurements, accurate down 
to the mass of a few electrons, can be correlated with 
a database that contains information about RNA 
weights for a given pathogen. Each weight in the data- 
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base table corresponds to the weight of 
the exact number of letters, or nucleo- 
tides, for a particular RNA. As long as in- 
formation about the nucleotide compo- 
sition is in the database, the system, 
called TIGER (triangulation identifica- 
tion for genetic evaluation of risks), can 
identify any bacterium, virus, fungus or 
protozoan. Before the RNA is weighed, 
another critical step is necessary: the poly- 




MICROBIAL SCALE: The TIGER system uses a 
mass spectrometer to gauge the weight of a 
microorganism's RNA. 



merase chain reaction must make copies 
of stretches of DNA or RNA that are 
found in all cellular organisms (or, for 
viruses, in whole families of them). 

Six months before last year's anthrax 
attacks, Ibis and partner SAIC, a contract 
research house, received a $10-million 
DARPA grant extending over two years to 
do a feasibility study for TIGER. The 
goal of the program is to develop a sys- 
tem that can detect the 1,500 or so agents 
known to infect humans. This approach 
differs fundamentally from the way oth- 
er biodetectors are designed. Most sys- 
tems use an antibody or a piece of DNA 
as a probe to bind to a protein or nucle- 
ic acid in a pathogen. These tests are lim- 
ited to detecting a small subset of the uni- 
verse of pathogenic agents. And an anti- 
body probe for, say, anthrax needs to 
make a match with the exact strain of the 
specific bacterium it is targeting. 
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Looking for Or. Right? 



With TIGER, if information about a 
pathogen is not in its database— because 
it is a newly evolved strain or a specially 
bioengineered bug— the software can flag 
any genetic likeness it has with other mi- 
croorganisms. "The database will say, Tve 
never seen this before, but it's very simi- 
lar to Yersinia pestis [plague],' " Ecker 
says. The detector would not, however, 
be able to pick up some genetic alter- 
ations of a microorganism— for instance, 
a gene for a toxin put in an otherwise 
harmless microbe. 

Although biosensors were never part 
of Ibis's business plan, about half of its 35 
employees are now on the TIGER team. 



ties. The extent to which TIGER can read 
pathogen signatures in complex samples 
will determine how effective the technol- 
ogy is. "The question is how far can we 
ultimately push it," Ecker says. 

In April, Nobelist Joshua Lederberg, 
a scientific adviser to Ibis, hosted a con- 
ference at the Rockefeller University to 
explore ways in which various govern- 
ment agencies could adapt TIGER to 
their particular needs. If tests prove suc- 
cessful, Ecker foresees a detector eventu- 
ally in every hospital, clinic and surveil- 
lance center, which could report back to 
a central monitoring site. How many of 
these systems would be deployed would 



If information about a pathogen is not in its 
database, TIGER might say, Tve never seen this before, 
but it's very similar to the plague bacterium." 



Work at the company continues on se- 
quencing the relevant genes to extract the 
needed RNA signatures for populating the 
databases— or obtaining this information 
from sequencing efforts under way world- 
wide. One of the biggest challenges the re- 
searchers still face is how to tell one piece 
of RNA from among thousands of speci- 
mens in a complex sample, such as a ball 
of dirt. "That requires very complex sig- 
nal processing," Ecker says. The problem 
that Ibis had encountered was one that 
radar engineers deal with constantly. In 
fact, this was the reason behind the col- 
laboration with SAIC, which produced 
culture shock when Ibis's molecular biol- 
ogists began to work with SAIC's radar 
engineers. "We spent the better part of a 
whole year figuring out how to communi- 
cate with each other," Ecker remarks. 

According to Ecker, it would have 
been easy to detect the anthrax in the let- 
ter sent to Senator Tom Daschle of South 
Dakota in October 2001, because the en- 
velope contained no other biological ma- 
terial. Finding a small amount mixed in 
with other organic molecules is much 
harder; researchers are still laboring to 
improve the signal-processing capabili- 



depend in part on society's fear level 
about biowarfare— each of the mass spec- 
trometers alone could cost $200,000. 
"Although TIGER is an extremely pow- 
erful tool, it is a big, cumbersome and ex- 
pensive machine. Plus, it does not give re- 
sults in real time," notes Rocco Casa- 
grande, a biologist with Surface Logix, a 
drug-discovery company that has done 
work in biodetection [see "Technology 
against Terror," by Rocco Casagrande; 
Scientific American, October]. 

, Ecker's optimism about the technol- 
ogy, though, extends beyond bio weap- 
ons. The detection system can be used to 
look not only for biopathogens but for 
any kind of disease-causing organism. 
Ecker believes that it could enable labo- 
ratories to forgo many of the time-con- 
suming processes needed to determine if 
a particular microorganism is present— 
whether that bug is measles, anthrax or 
a newly emerging infectious disease. "If 
my vision holds, this could supersede a 
lot of what takes place in infectious mi- 
crobiology," he says. "There would be 
no need to culture things anymore." 
Thus, a bioweapon sensor could become 
a universal disease sentinel. E3 
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BACILLUS ANTHRACIS 
The causative agent of anthrax 
and a Gram -positive, spore - 
forming bacillus. This aerobic 
organism is non -motile, catalase 
positive and forms large, 
grey-white to white, non- 
haemolytic colonies on sheep 
blood agar plates. 
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THE EVOLVING FIELD OF 
BIODEFENCE: THERAPEUTIC 
DEVELOPMENTS AND DIAGNOSTICS 



James C. Burnett*, Erik A. Henchal*, Alan L. Schmaljohn* and Sina Bavar? 
Abstract | The threat of bioterrorism and the potential use of biological weapons against 
both military and civilian populations has become a major concern for governments around 
the world. For example, in 2001 anthrax-tainted letters resulted in several deaths, caused 
widespread public panic and exerted a heavy economic toll. If such a small-scale act of 
bioterrorism could have such a huge impact, then the effects of a large-scale attack would 
be catastrophic. This review covers recent progress in developing therapeutic 
countermeasures against, and diagnostics for, such agents. 



Microorganisms and toxins with the greatest potential 
for use as biological weapons have been categorized 
using the scale A-C by the Centers for Disease Control 
and Prevention (CDC). This review covers the discovery 
and challenges in the development of therapeutic coun- 
termeasures against select microorganisms and toxins 
from these categories. We also cover existing antibiotic 
treatments, and early detection and diagnostic strategies 
for intervening against these biothreat agents at a point 
in disease progression when the prognosis can still be 
influenced; and to guide the selection of the optimum 
therapeutic protocols. Furthermore, although a detailed 
review of vaccines for biothreat agents exceeds the scope 
of this manuscript, an important point to consider is that 
the described therapeutics will most likely be used in 
combination with vaccines, which possess the advantage 
of providing long-term immuno-protection. 

Countering biological toxins 

Research to identify/develop therapeutics against bio- 
logical toxins Ms into two categories: relatively large 
biological inhibitors, such as antibodies and decoy 
proteins; and small-molecule inhibitors (both peptidic 
and non-peptidic). The identification and develop- 
ment of therapeutics against anthrax toxin, botulinum 
neurotoxins, ricin toxin and staphylococcal entero- 
toxins are discussed. This section is limited mainly to 



small-molecule inhibitors, and a brief review of anti- 
body development and design against biotoxins is 
mentioned in table l. 

Anthrax toxin. The toxin secreted by bacillus anthracis, 
anthrax toxin (ATX), possesses the ability to impair 
innate and adaptive immune responses 1 * 3 , which in 
turn potentiates the bacterial infection. This suggests 
that inhibiting ATX activity is a viable therapeutic 
modality — blocking the actions of this toxin should 
provide the window of opportunity that is necessary for 
conventional antibiotics, in combination with the 
inherent immune response, to clear the bacterium well 
before deadly sepsis and toxic shock occur, figure i 
shows how lethal toxin (LT, which comprises protective 
antigen (PA) + lethal factor (LF)), attacks cells. The 
potency of LT is shown in table 2. 

The action of ATX can be inhibited in several ways. 
One method would be to interfere with the rurin-medi- 
ated cleavage of PA to its active form (PAJ Mowing 
host-cell receptor binding 4 " 7 . To this end, hexa-D-arginine 
has been identified 8 , and has demonstrated the capacity 
to delay ATX toxaemia in vivo 9 . Following this approach, 
a more potent nona-D-arginine has been generated 10 . 

Non-functional (decoy) PA mutants that co-assemble 
with wild-type PA, and interfere with LF/oedema factor 
(EF) transport into the host-cell cytosol, have shown 
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ANTHRAX TOXIN 

A complex composed of three 

proteins: protective antigen (PA), 

lethal factor (LF) and oedema 

fector(EF). 

SNARE COMPLEX 
A complex composed of 
SMAP25, VAMP (also referred 
toassynaptobrevin)and 
syntaxin that is involved in 
membrane fusion and the 
exocytosis of acetylcholine into 
neuromuscular junctions. 



Table 1 1 Antibodies that target biological toxins 

Target Source 

Anthrax toxin Human, humanized 



Botulinum 
neurotoxins 



Rich 



Staphylococcal 
enterotoxins 



and murine 

Human, humanized 
and murine 



Avian and murine 



Human, avian 
and murine 



Comments Refetehce* 

Many have shown protection against both anthrax lethal 1 80-1 85 

toxin and Bacillus anthracis. 

Antibodies against all seven serotypes are needed. Some 1 86-1 94 

have been used in combination; affinity might be crucial fa " ^ ~ ' 

protection. Broad neutralizing antibodies are needed. 
Most ^antibodies are against the c^arboxyl end of the toxin; 
should explore other sites. 

Have shown protection In vivo. Critical need for high affinity 1 95-202 
antibodies. Genetically inactivated ricin can be used as an ^" ^ 

antigen. Aerosolized ricin induces lung damage even in 
surviving subjects 201 . Adjunctive therapeutics are desired. 

Some have shown protection against aerosolized toxin 62 203 204 

need an antibody with broad neutralizing activity against ■ 
all staphylococcal enterotoxins. -. JWU 



promise 1 U2 . Another method would involve interfering 
with PA-LF or PA-EF binding events. A polyvalent 
compound consisting of a polyacrylamide backbone 
substituted with multiple copies of a peptide (HTSTY- 
WWLDGAP) provides protection against LF' 3 . Finally, 
identifying or generating molecules that bind within the 
PA heptamer pore, thereby blocking LF/EF release into 
the host-cell cytosol, is also a potential avenue for toxin 
inhibition. In anticipation of such research, Nguyen 14 has 
generated a structurally viable PA heptamer model that 




Figure 1 1 A schematic of anthrax toxin (ATX) lethal factor cell entry, a | ATX is secreted 
receptor, where it is cleaved by a furin-related protease, to give active PA., c I PA. 
th^ 

Incffr i C ° mp,ex ,S end °cyt°sed . and LF (as shown) or EF (not shown) 

Stl of it TfS V m b f" 9 d6S ' gned t0 enter intoxicated ce,,s inhibit Protease 
Ts holn nt aCe ^ P,Ct,0n ° f NSC 1 21 55 Withln the * substrate binding cleft 
^f," ,nn,b,tor cart > on s are green, nitrogens are blue and oxygens are red The surface 
of LF is red for acidic surface, blue for basic surface, and white for neutral surface ' 



LF has been recognized as one of the main viru- 
lence components of B. anthracis. Consequently, 
there is much interest in identifying inhibitors of this* 
metalloprotease. Several hydroxamate inhibitors of 
LF have been identified 1516 , one of which, In-2-LF 16 , 
has a K = 1.0 nM in vitro. By incorporating a metal- 
chelating moiety, a potent inhibitor MKARRKKVYP- 
NHOH (K. = 0.001 1 u,M) was generated 1 7 - 18 . Using 
this information, additional peptidic inhibitors were 
identified 17 (table 3). Panchal et aV 9 used a high- 
throughput assay to analyse the National Cancer 
Institute's (NCrs) Diversity Set. Several small (non- 
peptidic) molecules with drug-like properties were 
identified (table 3; fig. 2a) . Some of these compounds 
were identified via subsequent three-dimensional 
database mining. On the basis of compounds identi- 
fied during this study, a common pharmacophore for 
LF inhibition was generated that will provide a tem- 
plate for identifying new leads. The search for LF 
inhibitors has also prompted the application of less 
conventional technologies — for example, a mass 
spectrometry-based technique was used to identify 
the inhibitor DS-998 (table 3) 20 . Finally, nature has 
proven once again to be a pharmaceutical treasure 
chest: natural products, including epigallocatechin-3- 
gallate (IC 50 = 97 nM), an isolate of green tea (table 
3) 21 , and aminoglycosides, including neomycin B (K 
= 7.0 nM) 22 , are potent LF inhibitors. 

Two notable inhibitors of the adenylate cyclase activ- 
ity of EF were identified during a screen of the Available 
Chemical Directory database 23 (table 4), whereas an 
active metabolite of adefovir dipivoxil (table 4) was 
found to selectively inhibit EF with high affinity 24 . 

Botulinum neurotoxins. Botulinum neurotoxins 
(BoNTs) are the most potent of the biological toxins 
(table 2), are easily produced and can be delivered via 
an aerosol route 25 . There are seven BoNT serotypes 
(A-G), and each cleaves a specific component of the 
soluble ^-ethylmaleimide-sensitive factor attachment 
protein receptor snare complex. This cleavage impairs 
the release of acetylcholine, and can lead to deadly flac- 
cid paralysis. The toxin is composed of a heavy chain 
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Table 2 \ Comparative biological potency of blodefence toxins 


Toxin 


|-D M .0*9Perkg). 


Source 


Rott Hint im trtvSn A 
LJuiuHi luiii toxin M 


0.001 


Bacterium 


Tetanus toxin 


0.002 


Bacterium 


Shiga toxin 


0.002 


Bacterium 


Staphlococcal entenotoxin B 


0.02* 


Bacterium 


Diptheria toxin 


0.1 


Bacterium 


Maitptoxin 


0.1 


Marine dinoflagellate 


Qguatoxin(P-C7X-1) 


0.2 
0.7 


Marina ri\r\s\f\i*tnr\\\*\l*%. 

ivianne ainotiageuate abnn 




plant 


Batrachotoxin 


2 


Poison arrow frog 


Ricin 


3 


Rant 


Tetrodotoxin 


8 


Pufferfish 


Saxitoxin 


10 


Marine dinoflagellate 


Staphylococcal 


10 (aerosol 


Bacterium 


eneterotoxin B 


nonhuman primates) 


Anthrax lethal toxin 


50* 


Bacterium 


Microcystin 


50 


Blue-green algae 


Aconitine 


100 


Plant 


T-2 toxin 


1,200 


Fungus 


Preaictea Human aerosol. *Based on rat model of anthrax PA and LF toxicity REF 25 provides an 
excellent review on inhaled biologicaf tox^s. Table adapted from REF. 206 ^ 



RICIN TOXIN 

Isolated from seeds of the castor 
plant (Ricinus communis), ricin 
toxin consists of a 32-kDa B 
chain that is linked by a 
disulphide bridge to a 32-kDa A 
chain (RTA) 175 *' 76 . The B chain 
binds cell surfaces. Once inside 
the cell cytoplasm, RTA is 
released, and irreversibly 
depurinates the 28S rRNA, 
destroying the elongation- 
factor-binding site, and thereby 
disabling cellular protein 
synthesis' 77 ' 7 '' 1 ». 

STAPHYLOCOCCAL 
ENTEROTOXINS 
A large group of protein toxins 
that engage both major 
histocompatibility complex class 
II molecules on the surface of 
antigen-presenting cells and the 
variable (V) 0-chain of a large 
subset of T-cell receptors. 



(HC) that targets gangliosidic receptors on nerve ter- 
minals, forms a low-pH endosome and translocates the 
light chain (LC) into the nerve cytosol 26 - 2 *. The LC acts 
as a zinc metalloprotease, and is responsible for SNARE 
protein cleavage 2 ^ 3 '. The HC and the LC therefore pro- 
vide two viable targets for neutralizing this toxin. The 
vast majority of research to identify BoNT therapeutics 
has focused on serotypes A and B. With regard to 
inhibiting HC activity, Deshpande et aU 2 and Sheridan 
et a/. 33 have proposed that several antimalarial com- 
pounds, which delay muscle paralysis following BoNT 
serotype A (BoNT/A) challenge, act by interfering with 
the acidity of the toxin-mediated endosome. In addi- 
tion, Eswaramoorthy et al M have generated a co-crystal 
structure of doxorubicin bound within the BoNT 
serotype B (BoNT/B) HC ganglioside-binding site. 
Such inhibitors would interfere with the ability of the 
toxin to bind to its neuronal receptor. 

LC inhibitors would be crucial to rescuing nerve 
activity after toxin internalization. In the search for 
such therapeutics, a number of short 'hinge' peptide 
inhibitors of the BoNT/A LC have been described 35 . 
However, the structures of these hinge peptides were 
not deconvoluted from the test mixtures. Using a sub- 
strate-to-inhibitor strategy, Schmidt and co-workers 36-39 
generated potent inhibitors of the BoNT/A LC (TABLES). 
Subsequently, a similar strategy was used by Sukonpan 
et a/. 40 to identify additional peptidic inhibitors. In a 
recent study 41 , small (non-peptidic and non-chelating) 
drug-like molecules that inhibit the BoNT/A LC were 
discovered (Table 5). Two of the most potent inhibitors, 
michellamine B and Q2-15 (fig. 2b), are shown in 
table 5. On the basis of the identified inhibitors and 



molecular docking using LCs obtained from available 
X-ray crystal structures 4243 , a pharmacophore for 
BoNT/A LC inhibition was generated 41 that will be of 
value for ongoing drug discovery. Furthermore, 
Breidenbach and Brunger 44 have recently solved the 
X-ray co-crystal structure of BoNT/ A LC complexed 
with residues 141-204 of synaptosomal-associated pro- 
tein 25 (SNAP25). This important structure reveals sub- 
strate-recognition exosites that could be exploited for 
inhibitor design. Toosendanin 45 , a triterpenoid natural 
product, might act at such an exosite. 

The majority of compounds that inhibit BoNT/B 
metalloprotease activity are pseudo-peptidic in 
nature. However, two non-peptidic inhibitors have 
been described 46 47 (table 6). With regard to pseudo- 
peptides,phosphoramidon and three of its synthetic 
derivatives were found to be weak inhibitors 48 , 
whereas buforin I has also shown activity against the 
BoNT/B LC 49 . Recently, a Cys-containing peptide 
inhibitor was also reported 50 . The most effective 
pseudo-peptide BoNT/B LC inhibitors to date were 
identified during the course of several complemen- 
tary studies. Initially, a series of pseudo-tripeptides 
with nominal K. values were generated 51 . In subse- 
quent publications 52 53 , side-chain modifications pro- 
duced more potent inhibitors (table 6) 53 . In the latest 
study, the pseudo-tripeptide inhibitors were subjected 
to minor structural changes, and several compounds 
with K values ranging from 2.3 nM to 5.4 nM where 
generated, with a symmetrical disulphide derivative 
displaying the greatest potency (table 6) M . 

With regard to the BoNT serotype F LC, Schmidt 
and Stafford recently generated a potent peptidic 
inhibitor composed of VAMP residues 22-58 (J. J. 
Schmidt and R. G. Stafford, personal communication). 

Ricin toxin, The potency of ricin toxin is show in table 2. 
In preparation for inhibitor development, Monzingo 
and Robertus 55 solved co-crystal structures of two 
substrate analogues — formycin monophosphate 
(FMP) and dinucleotide ApG — bound to the ricin 
toxin A chain (RTA). Using the FMP-RTA co-crystal 
as a guide, Yan et al* identified the pterin-based 
inhibitors pteroic acid and neopterin (table 7). Both 
inhibitors were co- crystallized with RTA (fig. 2c). In a 
follow-up study 57 , an oxazole-pyrimidine ring system 
(90G) (table 7) was also found to inhibit the RTA. 
Aptamers (nucleic-acid ligand 58 ) that inhibit the RTA 
have also been generated. Hesselberth era/. 59 identi- 
fied a 31 -nucleotide aptamer, whereas Tanaka era/. 60 , 
using a mechanistic approach 61 , generated a variety of 
much smaller aptamers containing unnatural sugar 
and purine derivatives (table 7) 60 . 

Staphylococcal enterotoxins. staphylococcal enterotox- 
ins (SEs) stimulate a powerful cytokine and immune 
response, which has earned them the name superanti- 
gens (SAgs). figure 2d shows the co- crystal of a SAg 
and a human class II major histocompatibility com- 
plex (MHC) molecule. SEs and other related exotox- 
ins have been implicated in various disorders and 
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lethal shock syndrome 62 . Many of these exotoxins are 
relatively easy to produce in large quantities and are 
remarkably stable. When delivered by aerosol, these 
agents are highly incapacitating and lethal. Modulating 
cytokine responses is one of the clear mechanisms to 
interfere with SE toxicities 63 ' 64 . 

Soluble decoy receptor, high-affinity variants of the 
T-cell receptor (TCR) Vp region have been engineered 
to counteract SEs as therapeutic leads 65 - 66 . Additional 
studies have now generated V0 proteins against several 
toxins with picomolar affinities (R. Buonpane and D. 
Kranz, personal communication). Such high affinity 
might be essential for neutralizing agents such as 
SAgs, which are highly toxic even at extremely low 
concentrations. 



Although consensus peptides as therapeutics are 
presently controversial, in some animal models these 
mimetic peptides have been shown to diminish the toxic- 
ity of SAgs 67 * 69 . In one such study, Arad and colleagues 70 
used a mimetic peptide and produced evidence that 
divergent SAgs inhibited gene expression of human T 1 
cytokines . In low molar excess over SAg challenge con- 
centration, this peptide mimetic protected mice from the 
lethal effects of a broad spectrum of these toxins, even 
when given post-challenge. The peptide is a mimetic of a 
domain that is structurally conserved among SAgs, yet it 
is remote from binding sites for MHC class II and TCR. It 
has been proposed that SAgs might use this domain to 
bind to a novel receptor that is crucial for their action 
(Kaempfer R, personal communication). 



Table 3 1 Lethal factor (LF) inhibitors 

LF inhibitor chemical structure 



Name 



In vitro activity Cell-based References 



HS 



NH 2 



2-thiolacetyl-YPM- K. = 11 uM 
amide 



HO" 



) V — NH 

. ( NH- 



O 

/ 0 If 

D— NH (' 




GM6001 



NSC 12155 



NSC 357756 



K, = 2.1nM 



K = 500 nM 



NSC 369721 K, = 4.2nM 



GaJlate 



DS-998 



100 uM 

concentration 
protects cells. 



X, = 4.9^M 100 nM 

concentration 
protects cells. 



Epigallccatechin-3- EC^ = 97 nM 1 0 uM 



protects cells. 



1-10 nM 
concentration 
protects cells. 



17 



17 



19 



19 



19 



21 



20 
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Figure 2 1 Toxin interactions with inhibitors (a~c) or other proteins (d). a | The co<rystal 
structure of NSC 1 21 55 bound in the lethal factor (LF) substrate-binding cleft (PDB Ref Code = 
1 PWP). LF is shown in green ribbon. Residues of the LF catalytic engine are shown in stick. 
Carbon atoms are green; oxygen atoms are red; and nitrogen atoms are blue. NSC 1 21 55 
carbons are magenta. The inhibitor sits in close proximity to the enzyme's catalytic zinc (gold), 
b | Inhibitor 02-1 5 docked in the botulinum neurotoxin serotype A (BoNT/A) light-chain (LC) 
substrate-binding deft. The BoNT/A LC model is a dynamics conformation 205 generated from the 
X-ray crystal structure of PDB ref code = 1 E1 H. Colours are as described for a. Additionally, . 
enzyme residues are rendered in stick. Q2-1 5 carbons are magenta; and Q2-15 chloro 
substituents are light green. One of the 7-chloro-quinoline components interacts with the catalytic 
zinc of the enzyme, whereas the other binds in a pocket located behind the catalytic engine of the 
enzyme, c | The co-crystal structure of pteroic acid bound in the substrate-binding pocket of the 
ricin A chain (POB Ref Code = 1 BR6). Colours are as described for a and b. Red spheres are water 
molecules, d | The co-crystal structure of the SEB-HLA-DR1 interaction (PDB Ref Code = 1 SEB). 
SEB is depicted as cyan ribbons and HU\-DR1 is depicted as green ribbons. The side chains of 
residues spanning the contact interface are shown in stick, with carbon colours corresponding to 
protein ribbon colour. Residue oxygens are red and nitrogens are blue. 



Targeting viral pathogens: variola and filoviruses 

Therapeutics for viral infections can be broadly catego- 
rized as agents that attack the virus and its replicative 
cycle directly, or as agents that assist and fortify host 
immune defences. In principle, there are abundant 
targets and numerous strategies for both categories. 
table 8 provides an overview of the strategies and 
opportunities available for new therapies against a virus, 
juxtaposed with some of the challenges in bringing such 
strategies into clinical use. The view presented is neces- 
sarily incomplete, but serves to highlight both the 
apparent vulnerabilities of viruses and the extraordi- 
nary challenges inherent to dampening logarithmic 
viral replication to a medically significant degree. As 
reviewed recently by De Clercq 71 , there are only 37 
licensed antiviral drugs (not including interferons or 



antibodies) available for clinical use. Many are for the 
treatment of HIV, 12 are for treating herpes virus (her- 
pes simplex virus (HSV), Varicella-Zoster virus (VZV) 
and cytomegalovirus (CMV)) and 4 are for the therapy 
and prophylaxis of influenza virus. However, a cause for 
optimism is that the viruses of greatest concern in 
biowarfare and bioterrorism cause acute viral infec- 
tions, which for lucky survivors is followed by immune 
recovery. Antiviral therapies therefore need only be 
effective for relatively short periods (see box i for case 
examples of filoviruses and orthopoxviruses). 

Antiviral drugs. Attachment and entry remain enigmas 
for both filoviruses and orthopoxviruses, and emerging 
data are mired in uncertainty and controversy. The 
search for specific filovirus receptors 72 ' 73 has been coun- 
tered by evidence of more ubiquitous and unspecific 
lectin-like receptors 74 ' 75 that might be difficult to antag- 
onize with drugs. However, recent structure-activity 
relationship (SAR) studies indicate that Cyanovirin-N, a 
carbohydrate-binding protein, might inhibit Ebola 
virus entry 76 . Orthopoxviruses, though very different in 
their surfaces from the sugary filaments of Ebola and 
Marburg, are similarly the subject of viral attachment 
and entry research 77 . Fusion inhibition, which has 
proven fruitful for treating both HIV and influenza 71 , 
could provide therapeutic opportunities for both viral 
genera, and is being actively pursued 77 "* 0 . Inhibition of 
viral replication seems to be especially feasible for both 
filoviruses and orthopoxviruses: numerous genomes 
have been sequenced, several key enzymes identified, 
basic replicative steps described and structural associ- 
ations among proteins partially described 77 - 81 . 

This abundance of potential targets could result in 
several therapeutic approaches, including antisense 
targeting of the viral genome, inhibition of the repli- 
case or polymerase activity by small-molecule 
inhibitors, as well as other specific molecular targets 
essential for the formation of a replication-competent 
complex 82 . The recent development of reverse genetics 
and filovirus reporter- based mini-genomes 83 , as well 
as green fluorescent protein (GFP) -expressing Ebola 
virus 84 , is expected to significantly facilitate the identi- 
fication of inhibitors of filovirus replication. Final 
assembly and viral egress from cells is simpler for 
filoviruses than for poxviruses. Results from electron 
microscopy have long indicated that the final assem- 
bly of filamentous Ebola and Marburg viruses occurs 
at cell membranes 85 * 86 , and recent work has shown 
that filoviruses are among the subset of viruses that 
exploit specialized cell-membrane regions called lipid 
rafts 87 . Filovirus raft assembly might therefore be a 
viable target. Reverse genetics experiments can be 
used to explore whether a putative target, such as 
furin cleavage site of Ebola virus, is essential for viral 
infection 88 . Compared with filoviruses, poxvirus 
egress from cells is considerably more complicated 77 , a 
situation that would seem to make the target even 
more vulnerable. Over the years, vaccinia virus 
mutants defective in various aspects of final assembly 
have been identified, host proteins implicated and 
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Table 4 1 Oedema factor (EF) inhibitors 

EF inhibitor chemical structure Name 




NhrN 



119804 



NHL 




277890 



NH 2 



N" 




N N 



NH 2 



N 

i \jf 



Adefovir dipivoxil 



0 / 

Vf 

O X 



In vitro activity 
10^ = 60 uM 



10^ = 90^ 



K, = 27nM 
(for adefovir 
diphosphate, active 
cellular metabolite of 
adefovir dipivoxil) 



Cell-based assay 

125 ^Mand greater 
prevents cAMP-induced 
cell rounding. 



1 25 \M and greater . 
prevents cAMP-induced 
cell rounding. 



References 

23 



«C B = 0.1- 



0.5 pM 



23 



24 



compounds identified that inhibit late particle forma- 
tion. Additionally, the apparently effective but problem- 
atic antiviral drug cidofovir seems to be effective 
against many orthopoxviruses, and is potentially useful 
for the treatment of smallpox and vaccinia 7189 . 

Adjunctive therapy. Filovirus infections are associated 
with a number of pathological conditions, including 
disseminated intravascular coagulation, which has been 
proposed to result from upregulation of tissue factor on 
the surface of leukocytes 90 . Partial success against Ebola 
virus infections in rhesus monkeys using recombinant 
nematode anticoagulant protein C2 has recently been 
reported 91 . Although this study is encouraging, the utility 
of anticoagulant therapy in humans requires further 
studies — in particular in combination with specific 
antiviral therapeutics. 

Therapeutic antibodies. Both filoviruses and orthopox- 
viruses illustrate how the potential complexity and effec- 
tiveness of antibody-mediated protection is so often 
underestimated. Viral neutralization — commonly 
interpreted to mean the capacity of an immunoglobulin 
to interfere with viral attachment or entry — is only part 
of the protective role of antibodies 92 , and is sometimes 
insufficient. 

In rodent models of lethal Ebola and Marburg 
viruses, the administration of both polyclonal and mon- 
oclonal antibodies unambiguously confers protection 
before and sometimes after viral infection, and the 
demonstration of virus-neutralizing activity in the 
transferred antibody is a poor predictor of its efficacy in 
vivo 93 - 96 . The few antibodies tested in sensitive non- 
human primate models of filovirus infection have 
delayed viraemia and death, but have not been fully pre- 
ventative when the viral challenge was robust 97 . This has 
led to premature assertions about the irrelevancy of anti- 
bodies as filovirus therapies. Lessons from viral vaccine 
studies with Ebola and Marburg viruses repeatedly show 



that antibodies to the viral glycoprotein in conjunction 
with T-cell responses to this and other proteins are 
required for optimal protection 94 98 - 102 . Attempts to 
influence clinical outcomes in humans by the transfer 
of plasma from convalescent to ill individuals pro- 
duced encouraging results 103 ' 104 , but these studies were 
inadequately controlled and therefore inconclusive. 

A common observation in orthopoxviruses is the 
production of neutralizing antibodies (raised against 
inactivated virus) that alone prove insufficient to pre- 
vent disease and death, but which are protective when 
combined with an additional antibody population 
(found in serum from animals that had been infected 
with live virus) 105 . We repeated this observation both 
with monoclonal antibodies 106 and with DNA vaccines 
that evoked antibodies"* 107 ; in this case, even the most 
potent neutralizing antibodies (against the vaccinia 
virus protein L1R) were insufficient to prevent the inex- 
orable spread of virus in infected animals. In contrast, 
an antibody to a virally encoded cell-surface protein 
(A33R) was sufficient by itself or in conjunction with 
anti-LlR to provide robust protection from vaccinia 
virus in rodents. Others, extending the observations to 
additional proteins, have reported similar findings 108 , 
and an experimental DNA vaccine against monkeypox 
virus in non-human primates yielded concordant 
results 107 . This raises a question: how might antibodies, 
in addition to neutralizing antibodies, confer a thera- 
peutic effect? Early observations 92 ' 109 implicated the 
capacity of antibodies to bind to viral proteins on the 
surface of infected cells, and subsequent observations, 
including those with filoviruses and orthopoxviruses, 
tend to be consistent with the proposed requirement 
that the targets of non-neutralizing antibodies be exter- 
nally exposed. Mechanistically, one might evoke com- 
plement-mediated lysis of cells, antibody-dependent 
cellular cytotoxicity (in which Fc receptor-bearing cells 
destroy virally infected cells), perturbation of late events 
in viral assembly (as in the drug targeting above) or, as 
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in the case of orthopoxviruses, the targeting of a par- 
ticularly important but quantitatively minor viral 
population 105 ' 108 . In terms of the therapeutic value of 
antibodies, complexity is added by the search for anti- 
bodies in addition to those that can be assayed rapidly 
by binding or neutralization. Historically, the potency of 
vaccinia immune globulin (licensed for the treatment of 
smallpox vaccine complications) was judged by its neu- 
tralization capacity, a strategy salvaged by the acquisition 
of antibodies from donors whose sera also contained 
many other antibodies as well 1 ,0 . 

Augmenting or protecting innate immunity. The goal 
of some antiviral agents is to tip the balance of the 
immune response towards innate immunity and allow 
specific immune clearance mechanisms (adaptive 
immunity) to take over Jn . At the crossroads of many 
innate immune responses are interferons, a family of 
molecules that can directly evoke antiviral responses. 
However, the utility of interferons as broad-spectrum 
antivirals has been limited both by the transience and 
the toxicity of their effects. This has engendered cau- 
tion about the prospects for a broad array of other 
newly described cytokines that also stimulate innate 
immunity. On the other hand, other opportunities for 
drug intervention have arisen in targeting viral 
pathogens. The identification of proteins produced by 
vaccinia and influenza virus that act as interferon 
antagonists 1 nA 13 was followed by the demonstration 
that Ebola 1 14 and Marburg 1 15 viruses also make inter- 
feron antagonists. Additionally, orthopoxviruses syn- 
thesize an impressive array of homologues of cytokines, 
cytokine receptors, complement proteins, growth hor- 
mones and other molecules — the effects of which 
could confound innate immune responses 1 16 . Our abil- 
ity to modify the innate immune response in a thera- 
peutically significant manner necessitates a deeper 
understanding of the role of the components of this 
arm of the immune system in specific viral infections. 



Recently, a crucial role for natural killer (NK) cells was 
defined in protection against Ebola infection 117 . 
Interestingly, adoptive transfer of NK cells treated with 
Ebola virus-like particles and not inactivated Ebola 
virus resulted in significant protection of mice against 
lethal challenge, indicating that mobilizing the effector 
innate response early in infection might be a promising 
therapeutic strategy against filoviruses. 

Targeting host pathways. Viral pathogens have evolved 
over millennia by adapting to a limited number of cellu- 
lar mechanisms for cellular entry, replication, assembly 
and budding. Although a tremendous amount of effort 
has been devoted in the past decades to the develop- 
ment of therapeutic strategies targeting virus compo- 
nents, half of this work involves a single virus (HIV). In 
contrast, the common cellular pathways used by a wide 
array of viruses have been largely neglected as thera- 
peutic targets. In this regard, genetically engineered 
microbes represent major challenges for biodefence 
both because the pathogenicity of the organism might 
be unrecognized and/or the pathogenicity might be tai- 
lored to counter existing pathogen-targeted therapeu- 
tics. Host-targeted therapeutics would be the most 
viable option in coping with such unpredictable chal- 
lenges. Such host-targeted therapeutics would have two 
advantages: they would act as broad-spectrum thera- 
peutics and block all of the viruses that use the affected 
pathway; and they would make it more difficult for the 
pathogen to develop resistance, because there would be 
few alternative cellular pathways available for the virus 
to take advantage of. Besides cellular receptors and co- 
factors, a number of intracellular pathways, such as 
the vacuolar protein-sorting machinery 118 , cytoskele- 
tal network 119 and components of cellular antiviral 
defence' 20 - 121 , have been identified as crucial for viral 
pathogenesis. However, despite these advances, our 
understanding of the host pathways involved in viral 
pathogenesis remains limited. Genetic approaches such 



Table 5 1 Botulinum serotype A light chain (BoNT/A LC) inhibitors 

BoNT/A LG inhibitor chemical structure Name In vitro activity 
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Table 6 1 Botulinum serotype B light chain (BoNT/B LC) Inhibitors " 

BoWT/BLC inhibitor chemical structure Name In vitro activity References 




as RNA interference (RNAi), as well as various physical 
and functional knockout technologies, need to be 
applied to identify host genetic pathways involved in 
viral pathogenesis and to establish the degree of com- 
monality of these pathways across viral families. 
Molecular details of these pathways and the nature of 
their interactions with viral components need to be 
intensively studied by genetic, biochemical, structural 
and modelling approaches. This detailed body of 
knowledge would serve as a basis for identifying host 
targets and the rational design of broad-spectrum 
therapeutic strategies. 

Existing antimicrobial treatments 

At this time there are therapeutic protocols for treating 
those infected with many of the bacterial biowarfare 
pathogens. However, the scope of recovery is variable — 
in the case of individuals infected with inhalational 
anthrax, there is a limited window of opportunity during 
which antibiotics will control and eliminate the infec- 
tion. This section of the review covers characteristics 
(TABLE 9) and current drug therapies for three biowarfare 
agents: anthrax, plague and tularaemia. 

Naturally occurring strains of B. anthracis are 
generally susceptible to penicillins, first-generation 



cephalosporins, tetracyclines, rifampin, aminoglyco- 
sides, vancomycin, clindamycin and fluoroquinolones. 
It was recently found that 20 strains of B. anthracis also 
show sensitivity to imipenem, meropenem, dapto- 
mycin, quinupristin-dalfopristin, linezolid, GAR936, 
BMS284756, ABT773, LY333328 and resistance to 
clofazamine 122 ' 123 . The CDC and the Working Group 
for Civilian Biodefense treatment guidelines have been 
published for treatment of pulmonary anthrax 124 , and 
are provided in table io. The choice of the second or 
third antibiotic should be influenced by the likely 
resistance pattern of the strain causing the infection, 
and consideration should be given to antibiotics that 
penetrate the blood-brain barrier (penicillins and 
carbapenems, for example) due to the high frequency 
of meningitis associated with inhalational anthrax 
exposure 125 . The duration of therapy is controversial, 
but involves at least 60 days of treatment 124 ' 125 . 
Corticosteroids have been mentioned as a possible 
adjunctive therapy in the setting of meningitis or 
severe mediastinal oedema 125 , but there are no data to 
definitively support their use. 

A major concern with regard to B. anthracis and other 
microbial biodefence agents is genetically engineered 
antibiotic resistance. Several reports of recombinant 
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Table 7 1 Ricln toxin chain A (RTA) Inhibitors 

RTA inhibitor chemical structure Name In vitro activity References 
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YERSINIA PESTIS 

The causative agent of plague, 

it is an aerobic, Gram-negative 

bacillus from the bacterial femily 

Enterobacteriaceae. 



plasmids that confer antibiotic resistance when 
inserted into B. anthracishzve been published. One 
plasmid-containing strain was resistant to tetracycline, 
doxycycline and minocycline 126 . In another study, a 
recombinant plasmid encoding for resistance to peni- 
cillin, tetracycline, chloramphenicol, rifampin, macro- 
lides and lincomycin was inserted into the B. anthracU 
strain STI-1, which reportedly stably inherited the 
plasmid over several generations 127 . The possibility of 
antibiotic resistance in this pathogen indicates the 



Box 1 | Case examples of fiiovlruses and orthopoxviruses 

The filoviruses (Ebola and Marburg viruses) and the orthopoxviruses (variola/smallpox, 
monkeypox and other pox viruses) are high-priority viral threats, and there is an acute need 
for therapeutics that target these pathogens. Ebola and Marburg viruses are exceptionally 
deadly (70-90% mortality in some outbreaks), but are relatively simple viruses, consisting 
of seven genes encoded in a single strand of RNA' 59 . They are moderately contagious, but 
otherwise have numerous characteristics commonly associated with biological weapons 160 . 
These viruses are endemic in Africa' 61162 and, despite a great deal of scientific progress in 
the past 1 0 years 81 *UWUW«-i« no vacciries or treatments are available for clinical use. For 
comparison, orthopoxviruses are large DNA viruses that have nearly 200 genes and some of 
the most complex viral replication cycles known. Variola virus, which causes smallpox, is 
the most feared of this genus 166 because it is highly contagious, incapacitating, disfiguring 
and potentially deadly (historical highs of around 40% mortality in unvaccinated persons). 
Monkeypox, a rodent virus endemic in Africa, is far less contagious than variola but in some 
outbreaks has caused up to 10% mortality in unvaccinated individuals. The classical 
smallpox vaccine, which consists of vaccinia virus, affords relatively robust protection 
against both variola and monkeypox viruses, but has proven problematic in the modern era 
not only because of previously known adverse reactions (including disseminated vaccinia), 
but because of a rediscovered association with myocarditis 167 - 168 . However, safer vaccines are 
in the research pipeline 10 * 169 . Vaccinia immune globulin, an antibody-containing product 
from vaccinated persons, was licensed and is now offered under investigational status for 
the treatment of disseminated vaccinia 89 . 



importance of initial combination therapy when 
exposure to a genetically modified strain is suspected 

yersinia pestis is typically susceptible in vitro to peni- 
cillins, many cephalosporins, imipenem, meropenem, 
aminoglycosides, amikacin, quinolones and tetracy- 
clines. It is variably susceptible to trimethoprim, chlor- 
amphenicol and rifampin, and is commonly resistant to 
macrolides, clindamycin, novobiocin, quinupristin- 
dalfopristin and clofazamine (H. Heine, personal com- 
munication). (See table 10 for recommended antibiotic 
treatments for pneumonic plague.) The preferred ther- 
apy for Y pestis infection is an aminoglycoside, with 
streptomycin as an FDA-approved medication and 
gentamicin often mentioned as an alternate antibiotic. 

Although rarely reported, naturally occurring, 
highly antibiotic-resistant strains of Y pestis do occur. 
In a recent report, a strain isolated from a boy in 
Madagascar was demonstrated to have acquired a plas- 
mid that mediated resistance not only to streptomycin, 
chloramphenicol and tetracycline, but also to ampi- 
cillin, sulphonamides, kanamycin, spectinomycin and 
minocycline. These naturally occurring, highly resis- 
tant antibiotic strains are extremely concerning with 
respect to the development of biological weapons. 

FRANCESELLA TULARENsis is generally susceptible in vitro 
to aminoglycosides, tetracyclines, rifampin and chlor- 
amphenicol 1 28 - 133 ; however, many strains seem to be 
resistant to 0-lactam and monobactam antibiotics 133 . 
(See table 10 for recommended tularaemia treatments.) 
Similarly to the treatment of plague, streptomycin or 
gentamicin are the preferred therapy when there are no 
contraindications to the use of these medications' 34J35 . 
Ciprofloxacin was effective in treating a recent tularaemia 
outbreak in Spain 136 . 

Rapid detection and diagnostics 

The early detection and diagnosis of infection or 
intoxication with biological select agent and toxin 
(BSAT) is essential if intervention is to occur at a point 
at which the prognosis can still be influenced, and also 
to guide the selection of the optimum therapeutic pro- 
tocol (table io). In addition, such information can 
greatly facilitate the logistics of mobilizing supplies 
and personnel to areas of exposure. Here, detection* is 
defined as including those technologies required to 
identify a biological threat in the environment before 
or coincident with exposure. Environmental detection 
usually involves the testing of air, soil, fomites, water 
and foodstuffs. 'Laboratory diagnosis' includes those 
methods used to confirm the clinical observations of a 
physician by evaluation of standard clinical specimens, 
such as blood, serum, exudates, saliva, stool and tissues 
(table 9). The necessity for the rapid detection of 
BSAT-related illness and intervention with optimal 
therapeutic protocols was well illustrated during the 
200 1 anthrax attacks (BOX 2). 

Challenges facing the National Laboratory Response 
Network In 1999 a national laboratory response net- 
work (LRN) for bioterrorism was established by the 
CDC to test for biological and chemical agents (see fig. 3 
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Table 8 1 Quenching viral replication: opportunities and challenges 

Viral event Dynamic consequences Opportunities 



Virus (free or 
extracellular) 



Attachment to cells 



Entry, fusion, release 
of viral genome, 
translocation 



Complex cycle of 
transcription, translation 
and genome replication 



Gradual inactivation in a cell-free 
environment. 



Binding of virus to receptors) or 
unspecific ligands. Earliest 
signalling of innate immunity. 



Penetration and unveiling of RNA 
or DNA, sometimes stepwise or 
compartmentalized. Early defence 
cascades activated, including 
interferons, RNAi, apoptosis. 

Cell defence cascades are amplified; 
viral antagonists of intra- and 
extracellular defences produced; 
viral proteins on ceil surfaces 
expressed; viral proteins 
secreted; MHC- associated viral 
peptides processed; perturb 
'normal' cell surface. 



Pre-assembly: 
an orchestrated, 
compartmentalized 
encapsidation of 
nucleic acid with 
viral proteins 

Final assembly: 
can involve 
translocation, 
acquisition of outer 
capsid and/or budding 
from cell membranes 



Repitition/h v/vo, 
manifested by 
tissue tropisms, 
damage and disease 



Specific or quasi-specific 
associations between viral proteins 
and nucleic acids. 



Self-assembly driven by specific 
binding and movement of proteins; 
preferential assembly in specialized 
proteins (for example, lipid rafts); 
exploitation of cellular proteins and 
pathways (for example, TSG101); 
cell exhaustion and apoptosis; 
and death. 

Logarithmic amplification of 
viral burden; fatal virus- induced 
lesions in crucial organs; triggering 
of 'cytokine storms'; 
immunopathology from potent 
but lagging response. 



Specific binding and harmless removal of 
virus — for example by antibodies, 
heteropolymers and small molecules. 
Specific binding by drug or antibody to 
destabilize or irreversibly stabilize coat. 

Receptor blockade by antibodies or 
other drugs. Deliberate prior activation 
of innate immunity. 



Binding to fusion domain, fusion inhibition. 
Targeting exposed RNA, DNA, for example, 
nuclease, antisense. 



Specifically bind/disrupt viral protein/nucleic- 
acid functions and interactions (for example, 
protease inhibitors and replicase inhibitors); 
competitively inhibit viral antagonists of innate 
and adaptive immunity; specifically target viral 
proteins on cell surfaces (for example, 
antibodies for ADGC or targeted toxin); 
exploit, amplify and influence the innate 
and adaptive responses (for example, 
NK cells and CTL) to eliminate 'modified self'. 

Identify and inhibit protein-protein 
interactions; perturb nucleic-acid 
encapsidation motifs (for example, using 
a drug antagonist or antisense). 



Bind and disrupt proteins involved in final 
packaging; reversibly perturb essential 
cellular sites and proteins. 



Treat symptoms to sustain victim until 
immune system prevails; manage 
immune response and cytokine polarity. 



Challenges 

Phenotypic variation of viral population 
(quasi-species). Possibility of 
enhancing uptake and therefore 
disease. Natural diversity of coats 
among viral species and strains. 

Genotypic and phenotypic variation 
present in an amplifying virus pbpulation 
and escape mutants. Redund^cy ahd 
degeneracy in .viral and cell receptors. 
Adverse and transient effects of 
activating innate immunity. 

Fusion domains often cryptic, and 
are only transiently accessible. Nucleic 
acids protected by viral proteins, 
compartmentalization. 

Delivery of active compounds to 
intracellular targets; identification of 
appropriate targets; escape mutants, 
variation among viral strains; 
insufficient knowledge of how to safely 
manipulate the immune system 
without exacerbation of disease 
and autoimmunity in some individuals. 



Delivery of active compounds to 
intracellular targets; identification of 
appropriate targets. 



Delivery of active compounds to 
intracellular targets; identification of 
appropriate targets; overall safety of 
compounds that disrupt cellular 
processes. 



Discovery of active compounds; 
addressing issues of drug or antibody 
pharmacokinetics, bioavailability, 
efficacy, feasibility and safety. 



FRANCESELLA TULARENSIS 
The causative agent of 
tularaemia, it is a small, aerobic 
Gram-negative coccobacilli. This 
agent is the most infectious 
human pathogen known. In the 
past, both the former Soviet 
Union and the US had 
programmes to develop weapons 
containing this bacterium. 



for a schematic of the process) that could be used during 
a terrorism incident' 37 ' 138 . Each laboratory in the LRN 
follows the same rules for sample collection, shipping, 
agent containment and testing. LRN laboratories main- 
tain secure communication channels among themselves, 
state and local health authorities, CDC and other fed- 
eral agencies. The mission of the LRN is to maintain a 
laboratory network that will quickly respond to acts of 
biological and chemical terrorism. The system is now 
organized into a collection of surveillance (previously 
known as level A), confirmatory (level B and C) and 
national laboratories (level D). 

FDA-approved assays do not exist for most BSAT. 
The CDC therefore provides LRN- registered clinical 
laboratories, which are the front-line laboratory 
responders to biological terrorism, with approved 
protocols for most of the category A agents and some 
category B agents. LRN protocols use an integrated 



system of well-established microbiological methods, 
PCR gene amplification and improved immunodiag- 
nostic assays' 39 . CDC-supplied reagents and standards 
exist for the identification of B. anthracis, BoNT/A, K 
pesttSy R tularensis and Brucella spp. For a large number 
of agents, specimens must be sent directly to the CDC 
in Atlanta, Georgia, USA, or to designated LRN refer- 
ence laboratories because of the extreme hazard they 
represent to clinical laboratory personnel and the tech- 
nical complexity of the analysis required. In most cases 
the LRN system requires a combination of a screening 
evaluation at the level of the local hospital clinical labo- 
ratory and confirmation by a hierarchical reference 
laboratory in the system, table 10 shows the estimated 
time required for conducting LRN protocols, assuming 
a low-complexity sample or specimen. We can expect 
that the time required for laboratory confirmation will 
be worse for samples that must be transported to the 
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Table 9 1 Characteristics of selected BSAT 



EfSAT 

Anthrax 



Botulism 

Plague 

Smallpox 
Tularaemia 



Ebola and 
Marburg 



Biological characteristics 

Gram-positive rod; spore-forming; 
aerobic; non-motile; catalase positive; 
large, grey-white to white, non-haemofytic 
colonies on sheep-blood agar plates. 

Gram-positive rod; spore-forming; obligate 
Anaerobe; catalase negative; lipase 
production on egg yolk agar; 1 50-kDa 
protein toxin (types A-G); 2 subunits. 

Gram-negative coccobacilli often 
pleomorphic; non-spore forming; facultative 
anaerobe; non-motile; beaten copper 
colonies (MacConkey'sagar). 

Large double-stranded DNA virus; enveloped, 
brick-shaped morphology; Guarnieri bodies 
(virus inclusions) under light microscopy. 

Extremely small, pleomorphic, Gram-negative 
Coccobacilli; non-spore forming; facultative 
intracellular parasite; non-motile; catalase 
positive; opalescent smooth colonies on 
cysteine heart agar. 

Linear, negative-sense single-stranded RNA 
virus; enveloped; filamentous or pleomorphic, 
with extensive branching, or U-shaped, 
6-shaped or circular forms; limited cytopathic 
effect in Vero cells. 



Viral Linear positive-sense single stranded 

encephalitides RNA virus; enveloped, spherical virions 

with distinct glycoprotein spikes; cytopathic 

effect in Vero cells. 

Ricin toxin 60-65 kDa-protein toxin; two subunits; 
castor bean origin. 



Clinical specimens 

Blood; cerebral spinal fluid; 
pleural effusion fluid; 
skin-lesion material such 
as vesicular fluid or eschar. 

Serum; gastric aspirates; stool; 
respiratory secretions. 



Lymph node smears; 
aspirates; sputum; blood; 
cerebral spinal fluid. 

Throat swabs; induced 
respiratory secretions; serum; 
aspirates; tissue scrapings! 

Blood culture; serum; ulcer 
material; conjunctival 
exudates; sputum; gastric 
washes; pharyngeal exudates. 

Serum; liver; spleen; lymph 
nodes; kidney; lung; and 
gonads. 



Throat swabs; serum; 
cerebrospinal fluid. 



Serum; stool; urine; spleen, 
lung, kidney. 



Diagnostic methods* 

Culture; y-phage 
sensitivity; 

immunohistochernistry; 
PCR. 

Culture;' immunoassay; 
mouse neutralization 
ass^PCR. 

Culture; 

immunofluorescence 
assay; PCR. 

Viral culture;; PCR;. EM; 
immuhohistocherhistry; 
immunoassay. 

Culture; PCR; 
immunoassay. 



Viral culture; PCR; EM; 

immunoassay; 

immunohistochernistry. 



Viral culture; PCR; EM; 

immunoassay; 

immunohistochernistry. 

Immunoassay. 



centrally responding CDC laboratory after screening at 
the local level, as required for smallpox and hemorr- 
hagic fevers. On the basis of the limited public reports of 
the 2001 response to anthrax attacks, the calculated 
median time from first medical visit to laboratory con- 
firmation for suspected cutaneous and inhalation 
anthrax cases (n = 22) was 9 days 140 ' 141 . In most of the 
cases, in which an optimal antibiotic set was initiated as 
the first therapeutic option, the diagnosis depended on 
the astute observations and the sensitivity of the attend- 
ing physician to the possibility of anthrax. Although the 
laboratory response has technically improved since 2001, 
the reaction to an unknown or a genetically engineered 
threat could mimic the 2001 experience. 

Watching and sensing for biothreat agents. Two feder- 
ally sponsored programs, BioWatch and BioSense, are 
in the early stages of implementation and will encour- 
age the recognition of biological threat attacks on a 
wide scale 142 ' 143 . The BioWatch Program, which is a 
collaborative program between the Environmental 
Protection Agency (EPA), the Department of Home- 
land Security (DHS), the CDC and local authorities, 
will provide round-the-clock environmental monitoring 
for the intentional airborne release of select biological 
threats. Solid-phase filters and sometimes aqueous 
concentrates from BioWatch air samplers are evaluated 
for the presence of pathogens by designated local or 



state public-health laboratories using LRN protocols 
and assays. Similar surveillance systems are planned 
for post offices, and research has begun to devise sys- 
tems to protect buildings using 'smart* monitoring 
systems 144145 . Presumably after confirmation of the 
intentional release of a biological agent, local officials 
will implement a response plan that might include 
widespread prophylaxis and treatment in accordance 
with the public-health threat. The BioSense Program 
will use epidemiological methods to monitor selected 
surrogate markers of infectious disease outbreaks, 
such as emergency room visits, absentee rates at 
schools and work, pharmacy visits and other indica- 
tors. Possible limitations for both BioWatch and 
Biosense are described in box 3. 

Traditional immunodetection. The detection of agent- 
specific antibodies has been a traditional method to 
confirm clinical diagnoses. Others have demonstrated 
assays for the rapid detection of anthrax-specific anti- 
bodies in patient sera 146 . Recently, the FDA approved 
the use of the first commercial assay that detected 
anthrax-specific antibodies with high sensitivity and 
specificity. Although these assays are sensitive for 
detecting anthrax-specific antibodies in highly immu- 
nized individuals and convalescent sera, they might not 
be effective for identifying patients in the early stages of 
disease. Among postal workers, who arguably received 
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Table 10 1 Requirements for rapid diagnosis 



BSAT 



£J£ |^? tl0n ° l8e * se . Diagnostic Tirneto Therapeutic 
category period duration* approaches* diagnosis* options 

Death in 3-5 Level A Protocol 18-24h Ciprctocicin, 
days (untreated) doxycycline p penicillin 

?^ l H 24 T.v Level A Protocol £-21 days Equine & human 
^h (untreated); antitoxin 
30-60days 
w/treatment 

1-6 days 
(usually fatal) 



7-1 6 days 
(usually fatal) 

5-1 4 days 
(usually fatal) 

>8 weeks to 
>1 year 



Anthrax 


A 


1-6 days 


botulism 


A 

A 


1-5 days 


Plague 


A 


2-3 days 


Smallpox 


A 


7-1 7 days 


Tularaemia 


A 


1-21 days 


Ebola 


A 


4-21 days 


Marburg 


A 


9-10 days 


Brucellosis 


B 


5-60 davs 


Glanders 


B 


,10-14 days 


Q Fever 


B 


10-40 days 


Viral 

encephalitides 


B 


2-6 days 


Ricin toxin 


B 


1&-24hr 



2-21 days 
1-12 days 



Level A Protocol 


2 days 


Tetracycline, 
doxycycline 


Level D Protocol 


24-48 h 


Vaccinia vaccine, 
ciddfovir 


Level A Protocol 


3 days 


oucfjujniyciri, 
gentamicin 


Level D Protocol 


1-3 days 


Supportive care 


Level D Protocol 


1-3 days 


Supportive care 


Level A Protocol 


14-21 days 


Doxycycline and 
rifampin 


Classical Protocol 


1-3 days 


Sulphadiazine, tetra- 
cyclines, ciprofloxacin, 
streptomycin, novo 
biocin, gentamicin, 
imipenem, ceftrazidime 


Classical Protocol 


7-1 4 days 


Tetracycline, 
doxycycline 


Level D Protocol 


1-3 days 


Supportive care 


Level D Protocol 


1-5 days 


Supportive care 



/ur /7 > ^ n u iw a uwy «f my rrepareaness ana Kesponse website of th 

(htppy/yAww.bt.cdc.gov). Surveillance laboratories (level A); national laboratories (level D) 



the highest dose of anthrax spores during the 2001 
anthrax attacks, the mean duration between exposure 
and onset of disease was 4.5 days. Disease onset in these 
cases would be prior to the development of a robust 
humoral antibody response. Moreover, the need to 
collect paired acute and convalescent sera could limit 
the usefulness of these assays as epidemiological tools. 

Bioagent-directed detection. Promising new technolo- 
gies could enable the early recognition of replicating 
aetiological agents and their virulence factors. 
Potentially, the amplification of variable gene regions 
flanked by conserved sequences, followed by electrospray 
ionization mass spectrometry and base-composition 



Box 2 1 The necessity for BSAT rapid detection 

During the 2001 anthrax attacks, although several patients 
had exposure to anthrax spores confirmed by nasal swab 
culture, no cases of disease occurred in the -32,000 Senate 
staff and postal workers immediately targeted for post- 
exposure chemoprophylaxis' 40 • ,70 . By contrast, the post- 
syndromic group of inhalation anthrax-infected patients 
had a case mortality rate of approximately 45%' 4I . These 
data were consistent with other studies that suggested that 
early and aggressive treatment is necessary to influence 
survival after exposure to inhalation anthrax 1 7U72 . 



analysis of the products could be one approach. This 
approach, called triangulation identification for genetic 
evaluation of risks (TIGER) 147 , provides a high-through- 
put, multiple detection and identification system for 
nearly all known, newly emergent and bioengineered 
agents in a single test. This rapid, robust and culture-free 
system has been used to identify agents such as severe 
acute respiratory syndrome (SARS) -related coronavirus 
before their recognition by traditional methods. 
Robust and portable systems have been proposed for 
the development of civilian and military applications. 

Biosensing represents another evolving mechanism 
for early detection. Here, single proteinaceous nanome- 
ter-scale pores (such as anthrax PA) can be easily applied 
to provide the physical basis for rapid biosensing appli- 
cations. The mechanism of nanopore-based detection is 
simple: analytes that either bind to the nanopore or 
thread through it alter the ionic current in a characteris- 
tic manner. For example, the reversible binding of 
hydronium and deuterium ions to the a-hemolysin ion 
channel causes current fluctuations with amplitude and 
spectral signatures that indicate the type and concentra- 
tion of the isotope that is present 148 . The same ion 
channel was also used to detect and characterize indi- 
vidual molecules of single-stranded DNA that are driven 
electrophoretically through the pore 149 . This latter tech- 
nology was used to detect other analytes in solution. 



292 I APRIL 2005 | VOLUME 4 



www.nature.com/revlews/drugdlsF 



REVIEWS 




Figure 3 1 A schematic of how components of the 
national laboratory response network (LRN) 
coordinate when detecting and diagnosing a biothreat 
agent a | Initial responders collect evidence, which is then 
sent to surveillance laboratories or to confirmatory 
laboratories directly (b.c). Cooperation between these 
laboratories facilitates first line response procedures, 
d | Further confirmation of agent type and area of 
distribution, is then conducted at national laboratories. 



Specifically, analytes of interest that bind to sites on 
pore-permeant polynucleotides alter the ability of the 
DNA to enter and thread through the pore 150 . These 
approaches can be extended into biosensing of anthrax 
toxin at pM amounts (J. Kasianowicz and K. Halverson, 
personal communication). 



Box 3 1 BioWatch and Biosense limitations 



Although the BioWatch and BioSense Programs represent significant improvements 
in biological defence readiness, they could, however, fail to influence morbidity and 
mortality in the case of an attack. BioWatch will probably document an attack when a 
biological threat agent is used on the scale of a weapon of mass destruction. However, 
extensive epidemiological surveillance might still be necessary before wide-scale 
prophylaxis is implemented. Another issue that is yet to be resolved is whether 
environmental sampling is sufficient to trigger a wide-scale medical response. The 
FDA might have to review environmental detection technologies if they influence 
medical decision-making. A measured and conservative approach is likely. During the 
2001 anthrax attacks, Senate workers were screened and successfully treated after 
initial environmental test results were confirmed. But treatment of other populations 
might have been delayed by confusion and the lack of reliable laboratory 
confirmation' 45 . BioWatch samplers might not be effective for limited attacks on 
individuals or contamination of water and food sources. In the case of BioSense, 
surrogate markers of infectious disease outbreaks can only be lagging indicators of 
an attack. There could be hundreds or thousands of cases before an outbreak is 
recognized, depending on the sensitivity of the final system. Smallpox virus has a 
comparatively long incubation time of up to 17 days (TABLE 10). By the time BioSense 
detects a smallpox attack, multiple foci of infection across the country, with 
coincident close contact spread, would most likely already be developing using current 
disease models 173,174 . 



Host-directed detection. A powerful approach for identi- 
fying exposed or infected individuals is to develop highly 
specific and extremely sensitive innate biomarkers that 
can be detected very early after exposure to a biological 
agent There are a number of different types of biomark- 
ers, but one of the most effective methods for identifying 
highly specific and acutely sensitive biomarkers is 
through the use of gene- and protein-expression-pro- 
filing technologies 15 '- 153 . The advantage of gene- 
expression studies is that they are large-scale (able to 
monitor gene-expression changes across an entire 
genome in one assay), high throughput and highly cost 
effective (relative to other methods). For example, one of 
the areas in which this technology has received the great- 
est attention is in identifying biomarkers for cancer, a 
field in which expression profiling has been accepted as a 
powerful tool for identifying specific biomarkers for dis- 
ease progression, and discriminating between different 
subtypes of cancer, and, in some cases, identifying bio- 
markers for susceptibility to specific therapeutics 1 54 - ,56 « 

With regard to infectious diseases, expression profil- 
ing of human neutrophils exposed to bacteria reveals 
dramatic changes in the level of hundreds of mRNA 
species, including those for cytokines, receptors, mem- 
brane-trafficking regulators and genes involved in 
apoptosis 155 . More importantly, expression profiling of 
the neutrophil response indicates that key differences in 
mRNA-expression patterns could be detected on the 
basis of whether the cells were exposed to pathogenic or 
non-pathogenic bacteria. Other studies of virus-host 
interactions using expression technologies and genomic 
systems studies of host-pathogen interactions have 
identified specific host factors that pathogens can subvert 
to optimize their replication and life cycle 154 ' 156 . 

Recently, gene-expression-profiling technologies 
have been applied to the identification of biomarkers 
for predicting the toxicity of compounds. The field of 
toxicogenomics has received much interest in both the 
commercial and academic sectors because of its capa- 
bility to successfully predict the toxicity of compounds 
in drug development research, as well as in environ- 
mental studies 157 . Existing expertise could be harnessed 
and applied to developing predictive models to assess 
the extent of exposure to a biological agent, disease 
progression and to predict clinical outcomes. 

In the future, the creation of a widely available 
human-gene-expression database of responses to bio- 
logical threat agents would be extremely beneficial for 
the rapid and decisive identification of each agent — via 
a quick and simple blood test. Traditional methods for 
the identification of biological agents have focused on 
identifying the agent itself rather than identifying host 
response. However, many biological agents, such as 
haemorrhagic fever viruses, could be infectious at levels 
well below the limit of detection afforded by current 
technologies. Because the human innate immune sys- 
tem is an exquisitely refined, highly sensitive and highly 
specific detection system for pathogens, monitoring 
changes in host innate response via biomarkers is a 
novel method for identifying exposure to biowarfare 
agents at very early time points. 
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Challenges and future trends 

The work reviewed in this manuscript provides evi- 
dence that the scientific community has not turned a 
blind eye to countering biothreat agents, but has 
responded with a massive effort that has resulted in a 
steep and productive learning curve. This effort has 
been facilitated by timely and significant increases in 
support from funding agencies. However, there is a seri- 
ous lack of organization in how biodefence is currently 
addressed. Our existing preparedness and response 
measures are not sufficient to meet the challenges of a 
bioterrorist attack 158 . This is due not only to a lack of 
cooperation and coordination, but also to ineffective 
detection networks, a lack of time-effective diagnostic 
methodologies and the dearth of a clear vision and 
strategy to translate all of the publicly funded biode- 
fence research into useful therapies and antidotes. These 
issues can be easily mitigated with a unified plan of 
action, orchestrated by a central entity overseeing a 
comprehensive and organized approach to biodefence. 
We foresee such a central entity playing a pivotal role in 
ensuring that cross-communication between agencies is 



facilitated, and that research is focused and completed in 
a timely manner. In addition, as potential new therapeu- 
tics emerge from the drug discovery pipeline, greater 
involvement from the pharmaceutical industry will be 
required. It is an accepted fact that the industry is adept 
at translational research — that is, rapidly and effectively 
converting potential therapies into approved drugs. 
However, incentives will need to be put in place to 
encourage the pharmaceutical industry to conduct such 
costly studies, and this is where a unifying biodefence 
entity can have a major facilitating role. Presently, pro- 
ject Bioshield is a start, but needs serious improvements. 
The ability to develop new therapeutics, and their 
approval as drugs that can be strategically stockpiled, is 
urgent. However, new technologies for detecting the 
release of biothreat agents, and timely protocols for the 
specific diagnosis of a biothreat agent that has been 
used, will be needed; this in turn could prevent the 
chaos that was experienced during the anthrax attacks 
of 200 1 . If we start making plans today, and unify our 
efforts, it will be possible to create a true biodefence 
shield that will effectively curtail future acts of bioterror. 
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Pentagon employees couldn't see the gas 
seeping into their building. They couldn't 
taste or smell it. But strategically placed 
sensors immediately picked up the prob- 
lem, precisely tracking the wafting gas. 
Everyone was safe. 

This was not reality. This was Pentagon 
Shield, a Department of Defense exercise 
last spring that simulated a biological or 
chemical attack. Research teams released 
sulfur hexafluoride — a harmless gas used in 
airflow testing — outside the Pentagon inter- 
mittently over several days. Standard gas an- 
alyzers traced its movement around and into 
the building, while other sensors recorded 
weather conditions. With those data, scien- 
tists are refining a computer model of 
aerosolized weapon movement. 

In a real attack, however, unlike a neatly 
defined exercise, it's unclear how well actual 
sensors would perform. The Department of 
Homeland Security (DHS) spends more 
than $60 million annually on environmental 
detectors that monitor outdoor air for 
bioweapons, but many scientists argue that 
those detectors are ineffective. Now, DHS 
plans to spend at least $32 million more, 
over the next 18 months, to develop next- 
generation sensor technology. 

"This research has tremendous prom- 
ise," says Penrose Albright, assistant secre- 
tary for science and technology at DHS. 
But scientists remain skeptical that govern- 
ment contractors really can design sensors 
that quickly, cheaply, and accurately detect 
one of the dozens of bacteria, viruses, or 
toxins that could become aerosolized 
bioweapons (see table). 

Hazardous history 

Bioagents instill fear because just a little can 
pack a big punch. "Infectious biological 
agents are on the order of 1000 to I million 



times more hazardous than chemical 
[agents]," says Edward Stuebing, head of 
aerosol sciences at the U.S. Army Edgewood 
Chemical Biological Center in Edgewood, 
Maryland. 

For decades, these worries were the quiet 
domain of U.S. military and national 
weapons labs, funded by the Department of 
Energy or the Defense Advanced Research 
Projects Agency. Researchers at Los Alamos 
National Laboratory (LANL) in New Mexi- 
co and Lawrence Livermore National Labo- 
ratory (LLNL) in California collaborated on 
an early biodetection network, dubbed 
BASIS. That eventually led to the sole 
environmental bioweapon sensor deployed 
nationwide today: Bio Watch, an aerosol sys- 
tem that works like a vacuum cleaner, suck- 
ing air over filter paper that traps aerosol par- 
ticles. Although earlier BASIS sensors were 
designed only to detect bioweapons during 
specific events, such as the Olympics, DHS 
has deployed BioWatch sensors to continual- 
ly monitor air in more than 30 major cities. 

Despite DHS claims of a perfect record, 
scientists privy to classified assays suggest 
that the sensors may experience false posi- 
tives — mistaking normal environmental tox- 
ins for bioweapons. Others complain that be- 
cause the assay results are classified, they 
have not been evaluated by outside scientists. 

DHS's Albright characterizes BioWatch 
as a starting point, a relatively cheap sys- 
tem that can be upgraded with new tech- 
nology. Much of the cost of BioWatch — 
roughly $60 million annually, or $2 million 
per city — is labor, he says: "Today, we col- 
lect the BioWatch filter, take it to the lab, 
treat the sample, do an initial screen, and 
then, if we get a hit, take it through an ex- 
tensive battery of tests." 

DHS wants a faster, sleeker system— one 
that continuously sniffs for bioweapons and 



can be sampled frequently with little mainte- 
nance, Albright says: "We want high sensi- 
tivity, minimal false alarms, and low cost, so 
we could deploy it nationally in large quanti- 
ties and expect it to be maintained by, say, 
volunteer firefighters " 

That's a big jump from today's 
BioWatch. But DHS's external funding arm, 
the Homeland Security Advanced Research 
Projects Agency (HSARPA), thinks it can 
make the leap. The agency recently 
launched its first research push, allocating 
more than $32 million to 14 outside teams.* 

DHS is funding six teams to develop 
high-priority "detect-to-treat" systems. 
These would be deployed outdoors like 
BioWatch but would identify a bioweapon 
within just 3* hours, enabling doctors to treat 
exposed civilians. The remaining eight 
teams are doing feasibility studies for 
"detect-to-protect" systems, for use inside 
critical buildings and in specific outdoor 
spots, to detect a bioweapon within 2 min- 
utes, in time to warn civilians and trigger re- 
sponses in, say, ventilation systems. 

"We are asking everybody to work as 
fast as they can," says Jane Alexander, 
deputy director of HSARPA. "In some cas- 
es, we have told bidders, 'We know we're 
asking for the sun, the moon, and four 
planets. If you can only give us two planets, 
go ahead." With DHS investment, several 
sensor prototypes probably could be de- 
ployed within months, says J. Patrick Fitch, 
head of chemical and biological national 
security at LLNL. 

Fine-tuning g 

To build next-generation sensors, DHS I 
hopes to tweak existing prototypes with the | 
latest technology. Some sensors will run 1 
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simultaneous assays on microchips, foriri- 
stance, or tap new genomic markers for 
more definitive pathogen signatures. 

All biosensors share two basic tasks: to 
sample air particles and to identify any 
pathogens. For sampling air particles 1 to 
10 micrometers in size, a sensor includes 
one (or more) of several technologies. A 
vacuum, for instance, sucks air over filter 
paper to trap particles, as in the BioWatch 
sensor. Alternatively, a wetted cyclone 
draws air down a tube injected with water, 
which moves with centrifugal force to cap- 
ture particles. A third variety, called a vir- 
tual impactor, uses tiny jets to push air par- 
ticles down a tube at high speed, concen- 
trating them while diverting excess air. 
Each differs in cost, sensitivity, speed, and 
complexity. 

For the second task — isolating and iden- 
tifying bacterial, viral, or toxic particles 
trapped in the sample — sensor systems typi- 
cally run immunoassays, polymerase chain 
reactions (PCR), or mass spectrometry 
screens. Again, there are tradeoffs. Detect- 
to-protect technologies are relatively fast 
and cheap but often carry higher rates of 
false positives. "If I go from wanting an an- 
swer in an hour to wanting one in 2 minutes, 
I have eliminated all kinds of technologies, 
like PCR," says Fitch. 

Although slower, the detect-to-treat sen- 
sors often use PCR to glean greater detail 
about a pathogen's identity, activity, and sus- 
ceptibility to various 
treatment options. 
Among the DHS- 
funded teams, at least 
two detect-to-treat 
prototypes are already 
being field-tested. 
One is TIGER— for 
Triangulation Identifi- 
cation for Genetic 
Evaluation of Risk- 
developed by Science 
Applications Interna- 
tional Corp. in San 
Diego, California, and 
Ibis, a division of Isis 
Pharmaceuticals in 
Carlsbad, California. 
TIGER works by sam- 
pling the air, extracting nucleic acids, and 
amplifying those acids with broad-based 
PCR primers that capture all biological 
agents in the sample. TIGER electrosprays 
the PCR products into a mass spectrometer 
that produces each agent's mass and DNA 
base composition. Scientists compare an or- 
ganism's DNA signature with those in a 
broad database, confirming its identity — or, 
in the case of an unknown organism, using 
phylogenetics to characterize it. This process 
takes up to a day. 



A similar sensor, the Autonomous 
Pathogen Detection System (APDS), has al- 
ready been field-tested in the Washington, 
D.C., Metro transit system and at the San 
Francisco and Albuquerque airports. LLNL 
developed this sensor and licensed the tech- 
nology to MicroFluidic Systems, which 
leads one of the DHS-funded research teams. 

This sensor works by screening air parti- 
cles with immuno- 
assays or PCR analy- 
sis. By multiplexing 
— or running multi- * 
pie tests simultane- 
ously — an APDS unit 
can screen for more j 
than 100 different 
bacteria or viruses in 
about an hour. Net- 
worked sensors com- | 
municate data to a 
remote console, often 
via wireless connec- 
tion, so scientists get 
monitoring updates 
from afar. APDS can 
identify a known bio- 
weapon in 30 minutes 
to 1.5 hours, Fitch 
says. 

Faster detect-to- 
protect sensor proto- 
types are also emerg- 
ing. One DHS-funded 




CDC Category Listing 
of Select Agents 

CATEGORY A 
° Anthrax 

- Botulism 

- Plague 

• Smallpox 

• Tularemia 

' Viral hemorrhagic fevers 

CATEGORY B 

• Brucellosis 

• Epsilon toxin of Clostridium perfringens 

• Food safety threats (Salmonella, £. coli) 

• Glanders 

• Melioidosis 

• Psittacosis 

• Q fever 

• Ricin toxin 

• Staphylococcal enterotoxin B 

• Typhus fever 
■ Viral encephalitis 

• Water safety threats (Vibrio cholerae, 
Cryptosporidium parvum) 

CATEGORY C 

• Emerging infectious diseases such as 
Nipah virus and hantavirus 



Close encounters. Researchers have begun field-testing biosensors in 
urban subway systems and airports, among other indoor venues. 

team leader, Johns Hopkins University's Ap- 
plied Physics Laboratory (APL) in Laurel, 
Maryland, is developing a time-of-flight 
mass spectrometer that can, within minutes, 
identify a biological agent based on its pro- 
teins or peptides. APLs sensor automatically 
sucks in aerosol samples, mixes them with 
an ultraviolet light-absorbing chemical, and 
pulses the samples with UV light in a mass 
spectrometer. Based on light scattering and 
molecular weight, the system identifies key 
proteins, say, found in biotoxins. Such a sys- 



News Focus 

tern could instantly warn that bioagents may 
be present — and possibly trigger changes in 
ventilation systems or sound alarms. But the 
system offers less detail on pathogens than 
slower varieties do. 

Wrong track 

Still, skeptics question whether DHS's push 
for environmental detection is misguided. 

I Microbiologist Paul 
I Jackson of LANL ar- 
gues that biosensor 
\ research is a costly 
diversion that will 
provide, at best, a false 
sense of security. 
"Everybody has aero- 
sols on the brain " he 
says. "Frankly, I don't 
know that environmen- 
tal monitoring of 
aerosols at random — 
or even in important 
places — is necessarily 
the best approach." 

Jackson and oth- 
ers argue that more 
biodefense funds and 
government guidance 
should go to hospitals 
nationwide for "syn- 
dromic surveillance" 
or for thd use of sim- 
ple, reliable blood 
tests and other diag- 
nostics to detect 
bioweapons. "The 
best sentries we have 
are patients who come into [emergency 
rooms] with suspicious symptoms," Jack- 
son says. If an initial wave of bioterror vic- 
tims was diagnosed quickly, he adds, many 
might be saved — and a nationwide alert 
could immediately be launched. 

The federal government has already 
promised more than $2 billion in bio- 
defense funds to local public health lead- 
ers, and the Centers for Disease Control 
and Prevention has urged those leaders to 
invest in syndromic surveillance. But local 
efforts are patchy — and, many say, poorly 
coordinated. 

DHS also encourages syndromic 
surveillance. But its detection efforts 
begin in the environment, where questions 
first emerge. Did an attack actually 
happen? Can it be stopped? How can 
patients be treated? Can buildings be de- 
contaminated? 

Tradeoffs are likely to continue. Future 
bioterror weapons, scientists say, could in- 
clude genetically engineered pathogens, 
prions, and bioregulators. All demand new 
sensors — and questions. 

-Kathryn Brown 
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